Skip to content
BIND to Route 53 Mirror Walkthrough

Edit BIND

BIND remains the source of truth. Edit the zone on the master — Route 53 will only catch up after sync.

Terminal window
aws --profile bind-demo-onprem ssm start-session \
  --target "$(terraform -chdir=infra/terraform/onprem output -raw bind_instance_id)"

On the instance:

Terminal window
sudo vim /var/named/corp.internal.zone

Add or change an A record (and bump the SOA serial, e.g. YYYYMMDDNN):

walk  IN  A  10.0.1.77

Reload with rndc
BIND remote name daemon control — `rndc reload` loads zone file changes; `rndc status` confirms the server is up. and verify with dig
DNS lookup utility used on BIND and Test_Instance to prove authority and mirrored resolution.:

Terminal window
sudo rndc reload
sudo rndc status
dig @127.0.0.1 walk.corp.internal A +short
# Expected: 10.0.1.77

Exit the SSM
AWS Systems Manager Session Manager — interactive shell on private EC2 without SSH keys; all demo hosts use SSM. session when done (exit).

Next: Sync Lambda.