Selecting a Public Hosted Zone and Creating a Record Set

1. Using the Find Services search tool, locate and browse to the Route 53 dashboard.
2. In the left navigation panel, select Hosted Zones. (Ignore any error message about insufficient permission.)
3. From the list of hosted zones, select a public zone. (For our example, we use arcsight-dev.com).

4. Click on the public hosted zone domain name to list the record sets in the public zone.

5. Click Create Record Set and enter or verify values for the following parameters:
   • Name: Choose a name for the A-record. The record set FQDN will then be composed from this name and the public hosted zone domain name. In our example we will use srgdemo. Our example installation will then be available at the URL:
     srgdemo.arcsight-dev.com.
     Record the record set FQDN in the AWS worksheet.
   • Type: A - IPv4 address.
   • Alias: No
   • TTL: Leave default.
   • Value: Enter your bastion's public IP address.
   • Routing Policy: Simple

   

6. Click Create. The new record set is displayed on the list.

1. Run the following command to select public hosted zones:
   # aws route53 list-hosted-zones \
| jq -r '.HostedZones[] | select(.Config.PrivateZone==false) | "Id: " + .Id,"Name: " + .Name," " '

A list of hosted public zones is returned. For example:

Id:   /hostedzone/ZX47W6PZ55K6H
Name: connector.arcsight.com.

Id:   /hostedzone/Z3EAG7KOHX70J0
Name: arcsight-dev.com.

Id:   /hostedzone/Z8OJ5ACJB4YR6
Name: hello.com.

Id:   /hostedzone/Z1I5DUB009TKO3
Name: devops-conn.arcsight.com.

2. Choose one of the public hosted zones. For example, we will use the public hosted zone (name shown includes a period):
   arcsight-dev.com.
   Record the chosen public hosted zone name and ID in the AWS worksheet under Hosted zone name and Hosted zone Id respectively.
3. Choose a subdomain in selected public hosted zone. For example, we will use srgdemo. Combining the subdomain and hosted zone name with a final period will give us the complete DNS name where our new cluster will be accessible.
   Example:
   srgdemo.arcsight-dev.com.
4. From the directory arcsight-platform-cloud-installer-<version>/aws-scripts/objectdefs/, copy the supplied template CreateRecordSetInHostedZone.json to the working folder.
5. Open the template in a text editor and set values for the following placeholders:
   1. <Record name>: combine the name of the hosted zone, for example, srgdemo and Hosted zone name (for example, arcsight-dev.com) to create the DNS name and then append the dot character (.) Example: srgdemo.arcsight-dev.com.
   2. <Record type>: replace with a value of A.
   3. <Record value>: Use your bastion IP address.
   The placeholders in the template use syntax <placeholder name>, for example, <Record name>.

   Example of modified JSON template (notice that the trailing period in the record name is mandatory):

   {
      "Changes":[
         {
            "Action":"UPSERT",
            "ResourceRecordSet":{
               "Name":"srgdemo.arcsight-dev.com.",
               "Type":"A",
               "TTL":300,
               "ResourceRecords":[
                  {
                     "Value":"3.120.237.11"
                  }
               ]
            }
         }
      ]
   }

6. Run the following command:
   # aws route53 change-resource-record-sets \
--hosted-zone-id <Hosted zone Id> \
--change-batch file://CreateRecordSetInHostedZone.json

Parameters:

<Hosted zone Id>: Use the hosted zone Id retrieved above, for example: /hostedzone/Z3EAG7KOHX70J0

--change-batch: Replace the parameter here with your own modified instance of the JSON file CreareRecordSetInHostedZone.json.

7. The command returns a change request, for example:

{
   "ChangeInfo":{
      "Id":"/change/C04669622EJ7JNXG69KJO",
      "Status":"PENDING",
      "SubmittedAt":"2020-06-09T09:35:06.376000+00:00"
   }
}

Later the status, will change to INSYNC:

{
   "ChangeInfo":{
      "Id":"/change/C04669622EJ7JNXG69KJO",
      "Status":"INSYNC",
      "SubmittedAt":"2020-06-09T09:35:06.376000+00:00"
   }
}