route53-backup

A tool that makes backups of AWS Route53 records and stores them to S3 bucket

• barnybug/cli53
• aws/aws-cli

Running route53-backup

Running by setting AWS credentials through environment variables

docker run --rm \
  -e AWS_ACCESS_KEY_ID=<your-access-key-id> \
  -e AWS_SECRET_ACCESS_KEY=<your-secret-access-key> \
  -e AWS_S3_BUCKET=<your-bucket-name> \
  habitissimo/route53-backup

Running by setting AWS credentials through credentials file

Create a file containing your credentials:

[default]
aws_access_key_id=<your-access-key-id>
aws_secret_access_key=<your-secret-access-key>

docker run --rm \
  -v $(pwd)/credentials:/root/.aws/config \
  -e AWS_CONFIG_FILE=/root/.aws/config \
  -e AWS_S3_BUCKET=<your-bucket-name> \
  habitissimo/route53-backup

AWS IAM permissions

The IAM user must have the following policies attached.

Route 53

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "route53:GetHostedZone",
                "route53:ListResourceRecordSets"
            ],
            "Resource": "arn:aws:route53:::hostedzone/*"
        },
        {
            "Sid": "VisualEditor1",
            "Effect": "Allow",
            "Action": [
                "route53:ListHostedZones",
                "route53:GetHostedZoneCount",
                "route53:ListHostedZonesByName"
            ],
            "Resource": "*"
        }
    ]
}

S3

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "VisualEditor0",
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
            ],
            "Resource": "arn:aws:s3:::my-bucket-name/*"
        }
    ]
}