Amazon Web Services 2013 04 01 API

openapi: 3.1.0
info:
  title: Amazon Web Services accessanalyzer 2012 09 25 2013 04 01 API
  description: <p>Identity and Access Management Access Analyzer helps you to set, verify, and refine your IAM policies by providing a suite of capabilities. Its features include findings for external and unused access, basic and custom policy checks for validating policies, and policy generation to generate fine-grained policies. To start using IAM Access Analyzer to identify external or unused access, you first need to create an analyzer.</p> <p> <b>External access analyzers</b> help identify potential risks of accessing resources by enabling you to identify any resource policies that grant access to an external principal. It does this by using logic-based reasoning to analyze resource-based policies in your Amazon Web Services environment. An external principal can be another Amazon Web Services account, a root user, an IAM user or role, a federated user, an Amazon Web Services service, or an anonymous user. You can also use IAM Access Analyzer to preview public and cross-account access to your resources before deploying permissions changes.</p> <p> <b>Unused access analyzers</b> help identify potential identity access risks by enabling you to identify unused IAM roles, unused access keys, unused console passwords, and IAM principals with unused service and action-level permissions.</p> <p>Beyond findings, IAM Access Analyzer provides basic and custom policy checks to validate IAM policies before deploying permissions changes. You can use policy generation to refine permissions by attaching a policy generated using access activity logged in CloudTrail logs. </p> <p>This guide describes the IAM Access Analyzer operations that you can call programmatically. For general information about IAM Access Analyzer, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/what-is-access-analyzer.html">Identity and Access Management Access Analyzer</a> in the <b>IAM User Guide</b>.</p>
tags:
- name: 2013 04 01
paths:
  /2013-04-01/keysigningkey/{HostedZoneId}/{Name}/activate:
    POST:
      summary: Amazon Web Services Activatekeysigningkey
      description: Activates a key-signing key (KSK) so that it can be used for signing by DNSSEC. This operation changes the KSK status to ACTIVE.
      operationId: amazonWebServicesActivateKeySigningKey
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/associatevpc:
    POST:
      summary: Amazon Web Services Associatevpcwithhostedzone
      description: 'Associates an Amazon VPC with a private hosted zone.   To perform the association, the VPC and the private hosted zone must already exist. You can''t convert a public hosted zone into a private hosted zone.   If you want to associate a VPC that was created by using one Amazon Web Services account with a private hosted zone that was created by using a different account, the Amazon Web Services account that created the private hosted zone must first submit a CreateVPCAssociationAuthorization request. Then the account that created the VPC must submit an AssociateVPCWithHostedZone request.   When granting access, the hosted zone and the Amazon VPC must belong to the same partition. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition. The following are the supported partitions:    aws - Amazon Web Services Regions    aws-cn - China Regions    aws-us-gov - Amazon Web Services GovCloud (US) Region   For more information, see Access Management in the Amazon Web Services General Reference. '
      operationId: amazonWebServicesAssociateVPCWithHostedZone
      tags:
      - 2013 04 01
  /2013-04-01/cidrcollection/{CidrCollectionId}:
    GET:
      summary: Amazon Web Services Listcidrlocations
      description: Returns a paginated list of CIDR locations for the given collection (metadata only, does not include CIDR blocks).
      operationId: amazonWebServicesListCidrLocations
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/rrset/:
    POST:
      summary: Amazon Web Services Changeresourcerecordsets
      description: 'Creates, changes, or deletes a resource record set, which contains authoritative DNS information for a specified domain name or subdomain name. For example, you can use ChangeResourceRecordSets to create a resource record set that routes traffic for test.example.com to a web server that has an IP address of 192.0.2.44.  Deleting Resource Record Sets  To delete a resource record set, you must specify all the same values that you specified when you created it.  Change Batches and Transactional Changes  The request body must include a document with a ChangeResourceRecordSetsRequest element. The request body contains a list of change items, known as a change batch. Change batches are considered transactional changes. Route 53 validates the changes in the request and then either makes all or none of the changes in the change batch request. This ensures that DNS routing isn''t adversely affected by partial changes to the resource record sets in a hosted zone.  For example, suppose a change batch request contains two changes: it deletes the CNAME resource record set for www.example.com and creates an alias resource record set for www.example.com. If validation for both records succeeds, Route 53 deletes the first resource record set and creates the second resource record set in a single operation. If validation for either the DELETE or the CREATE action fails, then the request is canceled, and the original CNAME record continues to exist.  If you try to delete the same resource record set more than once in a single change batch, Route 53 returns an InvalidChangeBatch error.   Traffic Flow  To create resource record sets for complex routing configurations, use either the traffic flow visual editor in the Route 53 console or the API actions for traffic policies and traffic policy instances. Save the configuration as a traffic policy, then associate the traffic policy with one or more domain names (such as example.com) or subdomain names (such as www.example.com), in the same hosted zone or in multiple hosted zones. You can roll back the updates if the new configuration isn''t performing as expected. For more information, see Using Traffic Flow to Route DNS Traffic in the Amazon Route 53 Developer Guide.  Create, Delete, and Upsert  Use ChangeResourceRecordsSetsRequest to perform the following actions:    CREATE: Creates a resource record set that has the specified values.    DELETE: Deletes an existing resource record set that has the specified values.    UPSERT: If a resource set doesn''t exist, Route 53 creates it. If a resource set exists Route 53 updates it with the values in the request.     Syntaxes for Creating, Updating, and Deleting Resource Record Sets  The syntax for a request depends on the type of resource record set that you want to create, delete, or update, such as weighted, alias, or failover. The XML elements in your request must appear in the order listed in the syntax.  For an example for each type of resource record set, see "Examples." Don''t refer to the syntax in the "Parameter Syntax" section, which includes all of the elements for every kind of resource record set that you can create, delete, or update by using ChangeResourceRecordSets.   Change Propagation to Route 53 DNS Servers  When you submit a ChangeResourceRecordSets request, Route 53 propagates your changes to all of the Route 53 authoritative DNS servers managing the hosted zone. While your changes are propagating, GetChange returns a status of PENDING. When propagation is complete, GetChange returns a status of INSYNC. Changes generally propagate to all Route 53 name servers managing the hosted zone within 60 seconds. For more information, see GetChange.  Limits on ChangeResourceRecordSets Requests  For information about the limits on a ChangeResourceRecordSets request, see Limits in the Amazon Route 53 Developer Guide.'
      operationId: amazonWebServicesChangeResourceRecordSets
      tags:
      - 2013 04 01
  /2013-04-01/tags/{ResourceType}/{ResourceId}:
    GET:
      summary: Amazon Web Services Listtagsforresource
      description: Lists tags for one health check or hosted zone.  For information about using tags for cost allocation, see Using Cost Allocation Tags in the Billing and Cost Management User Guide.
      operationId: amazonWebServicesListTagsForResource
      tags:
      - 2013 04 01
  /2013-04-01/cidrcollection:
    GET:
      summary: Amazon Web Services Listcidrcollections
      description: Returns a paginated list of CIDR collections in the Amazon Web Services account (metadata only).
      operationId: amazonWebServicesListCidrCollections
      tags:
      - 2013 04 01
  /2013-04-01/healthcheck:
    GET:
      summary: Amazon Web Services Listhealthchecks
      description: 'Retrieve a list of the health checks that are associated with the current Amazon Web Services account. '
      operationId: amazonWebServicesListHealthChecks
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone:
    GET:
      summary: Amazon Web Services Listhostedzones
      description: Retrieves a list of the public and private hosted zones that are associated with the current Amazon Web Services account. The response includes a HostedZones child element for each hosted zone. Amazon Route 53 returns a maximum of 100 items in each response. If you have a lot of hosted zones, you can use the maxitems parameter to list them in groups of up to 100.
      operationId: amazonWebServicesListHostedZones
      tags:
      - 2013 04 01
  /2013-04-01/keysigningkey:
    POST:
      summary: Amazon Web Services Createkeysigningkey
      description: Creates a new key-signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.
      operationId: amazonWebServicesCreateKeySigningKey
      tags:
      - 2013 04 01
  /2013-04-01/queryloggingconfig:
    GET:
      summary: Amazon Web Services Listqueryloggingconfigs
      description: Lists the configurations for DNS query logging that are associated with the current Amazon Web Services account or the configuration that is associated with a specified hosted zone. For more information about DNS query logs, see CreateQueryLoggingConfig. Additional information, including the format of DNS query logs, appears in Logging DNS Queries in the Amazon Route 53 Developer Guide.
      operationId: amazonWebServicesListQueryLoggingConfigs
      tags:
      - 2013 04 01
  /2013-04-01/delegationset:
    GET:
      summary: Amazon Web Services Listreusabledelegationsets
      description: Retrieves a list of the reusable delegation sets that are associated with the current Amazon Web Services account.
      operationId: amazonWebServicesListReusableDelegationSets
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicy:
    POST:
      summary: Amazon Web Services Createtrafficpolicy
      description: Creates a traffic policy, which you use to create multiple DNS resource record sets for one domain name (such as example.com) or one subdomain name (such as www.example.com).
      operationId: amazonWebServicesCreateTrafficPolicy
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicyinstance:
    POST:
      summary: Amazon Web Services Createtrafficpolicyinstance
      description: 'Creates resource record sets in a specified hosted zone based on the settings in a specified traffic policy version. In addition, CreateTrafficPolicyInstance associates the resource record sets with a specified domain name (such as example.com) or subdomain name (such as www.example.com). Amazon Route 53 responds to DNS queries for the domain or subdomain name by using the resource record sets that CreateTrafficPolicyInstance created.  After you submit an CreateTrafficPolicyInstance request, there''s a brief delay while Amazon Route 53 creates the resource record sets that are specified in the traffic policy definition. Use GetTrafficPolicyInstance with the id of new traffic policy instance to confirm that the CreateTrafficPolicyInstance request completed successfully. For more information, see the State response element. '
      operationId: amazonWebServicesCreateTrafficPolicyInstance
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicy/{Id}:
    POST:
      summary: Amazon Web Services Createtrafficpolicyversion
      description: Creates a new version of an existing traffic policy. When you create a new version of a traffic policy, you specify the ID of the traffic policy that you want to update and a JSON-formatted document that describes the new version. You use traffic policies to create multiple DNS resource record sets for one domain name (such as example.com) or one subdomain name (such as www.example.com). You can create a maximum of 1000 versions of a traffic policy. If you reach the limit and need to create another version, you'll need to start a new traffic policy.
      operationId: amazonWebServicesCreateTrafficPolicyVersion
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/authorizevpcassociation:
    GET:
      summary: Amazon Web Services Listvpcassociationauthorizations
      description: Gets a list of the VPCs that were created by other accounts and that can be associated with a specified hosted zone because you've submitted one or more CreateVPCAssociationAuthorization requests.  The response includes a VPCs element with a VPC child element for each VPC that can be associated with the hosted zone.
      operationId: amazonWebServicesListVPCAssociationAuthorizations
      tags:
      - 2013 04 01
  /2013-04-01/keysigningkey/{HostedZoneId}/{Name}/deactivate:
    POST:
      summary: Amazon Web Services Deactivatekeysigningkey
      description: Deactivates a key-signing key (KSK) so that it will not be used for signing by DNSSEC. This operation changes the KSK status to INACTIVE.
      operationId: amazonWebServicesDeactivateKeySigningKey
      tags:
      - 2013 04 01
  /2013-04-01/healthcheck/{HealthCheckId}:
    POST:
      summary: Amazon Web Services Updatehealthcheck
      description: Updates an existing health check. Note that some values can't be updated.  For more information about updating health checks, see Creating, Updating, and Deleting Health Checks in the Amazon Route 53 Developer Guide.
      operationId: amazonWebServicesUpdateHealthCheck
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}:
    POST:
      summary: Amazon Web Services Updatehostedzonecomment
      description: Updates the comment for a specified hosted zone.
      operationId: amazonWebServicesUpdateHostedZoneComment
      tags:
      - 2013 04 01
  /2013-04-01/keysigningkey/{HostedZoneId}/{Name}:
    DELETE:
      summary: Amazon Web Services Deletekeysigningkey
      description: Deletes a key-signing key (KSK). Before you can delete a KSK, you must deactivate it. The KSK must be deactivated before you can delete it regardless of whether the hosted zone is enabled for DNSSEC signing. You can use DeactivateKeySigningKey to deactivate the key before you delete it. Use GetDNSSEC to verify that the KSK is in an INACTIVE status.
      operationId: amazonWebServicesDeleteKeySigningKey
      tags:
      - 2013 04 01
  /2013-04-01/queryloggingconfig/{Id}:
    GET:
      summary: Amazon Web Services Getqueryloggingconfig
      description: Gets information about a specified configuration for DNS query logging. For more information about DNS query logs, see CreateQueryLoggingConfig and Logging DNS Queries.
      operationId: amazonWebServicesGetQueryLoggingConfig
      tags:
      - 2013 04 01
  /2013-04-01/delegationset/{Id}:
    GET:
      summary: Amazon Web Services Getreusabledelegationset
      description: Retrieves information about a specified reusable delegation set, including the four name servers that are assigned to the delegation set.
      operationId: amazonWebServicesGetReusableDelegationSet
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicy/{Id}/{Version}:
    POST:
      summary: Amazon Web Services Updatetrafficpolicycomment
      description: Updates the comment for a specified traffic policy version.
      operationId: amazonWebServicesUpdateTrafficPolicyComment
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicyinstance/{Id}:
    POST:
      summary: Amazon Web Services Updatetrafficpolicyinstance
      description: ' After you submit a UpdateTrafficPolicyInstance request, there''s a brief delay while Route 53 creates the resource record sets that are specified in the traffic policy definition. Use GetTrafficPolicyInstance with the id of updated traffic policy instance confirm that the UpdateTrafficPolicyInstance request completed successfully. For more information, see the State response element.  Updates the resource record sets in a specified hosted zone that were created based on the settings in a specified traffic policy version. When you update a traffic policy instance, Amazon Route 53 continues to respond to DNS queries for the root resource record set name (such as example.com) while it replaces one group of resource record sets with another. Route 53 performs the following operations:   Route 53 creates a new group of resource record sets based on the specified traffic policy. This is true regardless of how significant the differences are between the existing resource record sets and the new resource record sets.    When all of the new resource record sets have been created, Route 53 starts to respond to DNS queries for the root resource record set name (such as example.com) by using the new resource record sets.   Route 53 deletes the old group of resource record sets that are associated with the root resource record set name.  '
      operationId: amazonWebServicesUpdateTrafficPolicyInstance
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/deauthorizevpcassociation:
    POST:
      summary: Amazon Web Services Deletevpcassociationauthorization
      description: 'Removes authorization to submit an AssociateVPCWithHostedZone request to associate a specified VPC with a hosted zone that was created by a different account. You must use the account that created the hosted zone to submit a DeleteVPCAssociationAuthorization request.  Sending this request only prevents the Amazon Web Services account that created the VPC from associating the VPC with the Amazon Route 53 hosted zone in the future. If the VPC is already associated with the hosted zone, DeleteVPCAssociationAuthorization won''t disassociate the VPC from the hosted zone. If you want to delete an existing association, use DisassociateVPCFromHostedZone. '
      operationId: amazonWebServicesDeleteVPCAssociationAuthorization
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/disable-dnssec:
    POST:
      summary: Amazon Web Services Disablehostedzonednssec
      description: Disables DNSSEC signing in a specific hosted zone. This action does not deactivate any key-signing keys (KSKs) that are active in the hosted zone.
      operationId: amazonWebServicesDisableHostedZoneDNSSEC
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/disassociatevpc:
    POST:
      summary: Amazon Web Services Disassociatevpcfromhostedzone
      description: 'Disassociates an Amazon Virtual Private Cloud (Amazon VPC) from an Amazon Route 53 private hosted zone. Note the following:   You can''t disassociate the last Amazon VPC from a private hosted zone.   You can''t convert a private hosted zone into a public hosted zone.   You can submit a DisassociateVPCFromHostedZone request using either the account that created the hosted zone or the account that created the Amazon VPC.   Some services, such as Cloud Map and Amazon Elastic File System (Amazon EFS) automatically create hosted zones and associate VPCs with the hosted zones. A service can create a hosted zone using your account or using its own account. You can disassociate a VPC from a hosted zone only if the service created the hosted zone using your account. When you run DisassociateVPCFromHostedZone, if the hosted zone has a value for OwningAccount, you can use DisassociateVPCFromHostedZone. If the hosted zone has a value for OwningService, you can''t use DisassociateVPCFromHostedZone.    When revoking access, the hosted zone and the Amazon VPC must belong to the same partition. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition. The following are the supported partitions:    aws - Amazon Web Services Regions    aws-cn - China Regions    aws-us-gov - Amazon Web Services GovCloud (US) Region   For more information, see Access Management in the Amazon Web Services General Reference. '
      operationId: amazonWebServicesDisassociateVPCFromHostedZone
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/enable-dnssec:
    POST:
      summary: Amazon Web Services Enablehostedzonednssec
      description: Enables DNSSEC signing in a specific hosted zone.
      operationId: amazonWebServicesEnableHostedZoneDNSSEC
      tags:
      - 2013 04 01
  /2013-04-01/accountlimit/{Type}:
    GET:
      summary: Amazon Web Services Getaccountlimit
      description: 'Gets the specified limit for the current account, for example, the maximum number of health checks that you can create using the account. For the default limit, see Limits in the Amazon Route 53 Developer Guide. To request a higher limit, open a case.  You can also view account limits in Amazon Web Services Trusted Advisor. Sign in to the Amazon Web Services Management Console and open the Trusted Advisor console at https://console.aws.amazon.com/trustedadvisor/. Then choose Service limits in the navigation pane. '
      operationId: amazonWebServicesGetAccountLimit
      tags:
      - 2013 04 01
  /2013-04-01/change/{Id}:
    GET:
      summary: Amazon Web Services Getchange
      description: 'Returns the current status of a change batch request. The status is one of the following values:    PENDING indicates that the changes in this request have not propagated to all Amazon Route 53 DNS servers managing the hosted zone. This is the initial status of all change batch requests.    INSYNC indicates that the changes have propagated to all Route 53 DNS servers managing the hosted zone.   '
      operationId: amazonWebServicesGetChange
      tags:
      - 2013 04 01
  /2013-04-01/checkeripranges:
    GET:
      summary: Amazon Web Services Getcheckeripranges
      description: 'Route 53 does not perform authorization for this API because it retrieves information that is already available to the public.   GetCheckerIpRanges still works, but we recommend that you download ip-ranges.json, which includes IP address ranges for all Amazon Web Services services. For more information, see IP Address Ranges of Amazon Route 53 Servers in the Amazon Route 53 Developer Guide. '
      operationId: amazonWebServicesGetCheckerIpRanges
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/dnssec:
    GET:
      summary: Amazon Web Services Getdnssec
      description: Returns information about DNSSEC for a specific hosted zone, including the key-signing keys (KSKs) in the hosted zone.
      operationId: amazonWebServicesGetDNSSEC
      tags:
      - 2013 04 01
  /2013-04-01/geolocation:
    GET:
      summary: Amazon Web Services Getgeolocation
      description: 'Gets information about whether a specified geographic location is supported for Amazon Route 53 geolocation resource record sets. Route 53 does not perform authorization for this API because it retrieves information that is already available to the public. Use the following syntax to determine whether a continent is supported for geolocation:  GET /2013-04-01/geolocation?continentcode=two-letter abbreviation for a continent   Use the following syntax to determine whether a country is supported for geolocation:  GET /2013-04-01/geolocation?countrycode=two-character country code   Use the following syntax to determine whether a subdivision of a country is supported for geolocation:  GET /2013-04-01/geolocation?countrycode=two-character country code&amp;subdivisioncode=subdivision code  '
      operationId: amazonWebServicesGetGeoLocation
      tags:
      - 2013 04 01
  /2013-04-01/healthcheckcount:
    GET:
      summary: Amazon Web Services Gethealthcheckcount
      description: Retrieves the number of health checks that are associated with the current Amazon Web Services account.
      operationId: amazonWebServicesGetHealthCheckCount
      tags:
      - 2013 04 01
  /2013-04-01/healthcheck/{HealthCheckId}/lastfailurereason:
    GET:
      summary: Amazon Web Services Gethealthchecklastfailurereason
      description: Gets the reason that a specified health check failed most recently.
      operationId: amazonWebServicesGetHealthCheckLastFailureReason
      tags:
      - 2013 04 01
  /2013-04-01/healthcheck/{HealthCheckId}/status:
    GET:
      summary: Amazon Web Services Gethealthcheckstatus
      description: 'Gets status of a specified health check.   This API is intended for use during development to diagnose behavior. It doesn’t support production use-cases with high query rates that require immediate and actionable responses. '
      operationId: amazonWebServicesGetHealthCheckStatus
      tags:
      - 2013 04 01
  /2013-04-01/hostedzonecount:
    GET:
      summary: Amazon Web Services Gethostedzonecount
      description: Retrieves the number of hosted zones that are associated with the current Amazon Web Services account.
      operationId: amazonWebServicesGetHostedZoneCount
      tags:
      - 2013 04 01
  /2013-04-01/hostedzonelimit/{Id}/{Type}:
    GET:
      summary: Amazon Web Services Gethostedzonelimit
      description: Gets the specified limit for a specified hosted zone, for example, the maximum number of records that you can create in the hosted zone.  For the default limit, see Limits in the Amazon Route 53 Developer Guide. To request a higher limit, open a case.
      operationId: amazonWebServicesGetHostedZoneLimit
      tags:
      - 2013 04 01
  /2013-04-01/reusabledelegationsetlimit/{Id}/{Type}:
    GET:
      summary: Amazon Web Services Getreusabledelegationsetlimit
      description: Gets the maximum number of hosted zones that you can associate with the specified reusable delegation set. For the default limit, see Limits in the Amazon Route 53 Developer Guide. To request a higher limit, open a case.
      operationId: amazonWebServicesGetReusableDelegationSetLimit
      tags:
      - 2013 04 01
  /2013-04-01/trafficpolicyinstancecount:
    GET:
      summary: Amazon Web Services Gettrafficpolicyinstancecount
      description: Gets the number of traffic policy instances that are associated with the current Amazon Web Services account.
      operationId: amazonWebServicesGetTrafficPolicyInstanceCount
      tags:
      - 2013 04 01
  /2013-04-01/cidrcollection/{CidrCollectionId}/cidrblocks:
    GET:
      summary: Amazon Web Services Listcidrblocks
      description: Returns a paginated list of location objects and their CIDR blocks.
      operationId: amazonWebServicesListCidrBlocks
      tags:
      - 2013 04 01
  /2013-04-01/geolocations:
    GET:
      summary: Amazon Web Services Listgeolocations
      description: Retrieves a list of supported geographic locations. Countries are listed first, and continents are listed last. If Amazon Route 53 supports subdivisions for a country (for example, states or provinces), the subdivisions for that country are listed in alphabetical order immediately after the corresponding country. Route 53 does not perform authorization for this API because it retrieves information that is already available to the public. For a list of supported geolocation codes, see the GeoLocation data type.
      operationId: amazonWebServicesListGeoLocations
      tags:
      - 2013 04 01
  /2013-04-01/hostedzonesbyname:
    GET:
      summary: Amazon Web Services Listhostedzonesbyname
      description: 'Retrieves a list of your hosted zones in lexicographic order. The response includes a HostedZones child element for each hosted zone created by the current Amazon Web Services account.   ListHostedZonesByName sorts hosted zones by name with the labels reversed. For example:  com.example.www.  Note the trailing dot, which can change the sort order in some circumstances. If the domain name includes escape characters or Punycode, ListHostedZonesByName alphabetizes the domain name using the escaped or Punycoded value, which is the format that Amazon Route 53 saves in its database. For example, to create a hosted zone for exämple.com, you specify ex\344mple.com for the domain name. ListHostedZonesByName alphabetizes it as:  com.ex\344mple.  The labels are reversed and alphabetized using the escaped value. For more information about valid domain name formats, including internationalized domain names, see DNS Domain Name Format in the Amazon Route 53 Developer Guide. Route 53 returns up to 100 items in each response. If you have a lot of hosted zones, use the MaxItems parameter to list them in groups of up to 100. The response includes values that help navigate from one group of MaxItems hosted zones to the next:   The DNSName and HostedZoneId elements in the response contain the values, if any, specified for the dnsname and hostedzoneid parameters in the request that produced the current response.   The MaxItems element in the response contains the value, if any, that you specified for the maxitems parameter in the request that produced the current response.   If the value of IsTruncated in the response is true, there are more hosted zones associated with the current Amazon Web Services account.  If IsTruncated is false, this response includes the last hosted zone that is associated with the current account. The NextDNSName element and NextHostedZoneId elements are omitted from the response.   The NextDNSName and NextHostedZoneId elements in the response contain the domain name and the hosted zone ID of the next hosted zone that is associated with the current Amazon Web Services account. If you want to list more hosted zones, make another call to ListHostedZonesByName, and specify the value of NextDNSName and NextHostedZoneId in the dnsname and hostedzoneid parameters, respectively.  '
      operationId: amazonWebServicesListHostedZonesByName
      tags:
      - 2013 04 01
  /2013-04-01/hostedzonesbyvpc:
    GET:
      summary: Amazon Web Services Listhostedzonesbyvpc
      description: 'Lists all the private hosted zones that a specified VPC is associated with, regardless of which Amazon Web Services account or Amazon Web Services service owns the hosted zones. The HostedZoneOwner structure in the response contains one of the following values:   An OwningAccount element, which contains the account number of either the current Amazon Web Services account or another Amazon Web Services account. Some services, such as Cloud Map, create hosted zones using the current account.    An OwningService element, which identifies the Amazon Web Services service that created and owns the hosted zone. For example, if a hosted zone was created by Amazon Elastic File System (Amazon EFS), the value of Owner is efs.amazonaws.com.     When listing private hosted zones, the hosted zone and the Amazon VPC must belong to the same partition where the hosted zones were created. A partition is a group of Amazon Web Services Regions. Each Amazon Web Services account is scoped to one partition. The following are the supported partitions:    aws - Amazon Web Services Regions    aws-cn - China Regions    aws-us-gov - Amazon Web Services GovCloud (US) Region   For more information, see Access Management in the Amazon Web Services General Reference. '
      operationId: amazonWebServicesListHostedZonesByVPC
      tags:
      - 2013 04 01
  /2013-04-01/hostedzone/{Id}/rrset:
    GET:
      summary: Amazon Web Services Listresourcerecordsets
      description: 'Lists the resource record sets in a specified hosted zone.  ListResourceRecordSets returns up to 300 resource record sets at a time in ASCII order, beginning at a position specified by the name and type elements.  Sort order   ListResourceRecordSets sorts results first by DNS name with the labels reversed, for example:  com.example.www.  Note the trailing dot, which can change the sort order when the record name contains characters that appear before . (decimal 46) in the ASCII table. These characters include the following: ! " # $ % &amp; '' ( ) * + , -  When multiple records have the same DNS name, ListResourceRecordS

# --- truncated at 32 KB (38 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/amazon-web-services/refs/heads/main/openapi/amazon-web-services-2013-04-01-api-openapi.yml