Route 53 Resolver Query Logs
E426155
Route 53 Resolver Query Logs is an Amazon Route 53 feature that records DNS queries made through the Route 53 Resolver, enabling visibility, troubleshooting, and security analysis of DNS traffic in AWS environments.
All labels observed (1)
| Label | Occurrences |
|---|---|
| Route 53 Resolver Query Logs canonical | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T4280177 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: Route 53 Resolver Query Logs Context triple: [Amazon CloudWatch, supports, Route 53 Resolver Query Logs]
-
A.
RIPEstat
RIPEstat is an online data platform that provides comprehensive information and visualizations about Internet number resources such as IP addresses, prefixes, and ASNs.
-
B.
RIPE Database
The RIPE Database is a public registry of Internet number resources and related contact information used for managing and coordinating IP address and AS number allocations in Europe, the Middle East, and parts of Central Asia.
-
C.
OpenDNS
OpenDNS is a cloud-delivered DNS and security service provider known for web filtering, phishing protection, and enterprise network security solutions.
-
D.
ThousandEyes
ThousandEyes is a network intelligence and digital experience monitoring company, best known for its internet and cloud visibility platform that helps organizations troubleshoot and optimize application performance across complex, distributed environments.
-
E.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: Route 53 Resolver Query Logs Target entity description: Route 53 Resolver Query Logs is an Amazon Route 53 feature that records DNS queries made through the Route 53 Resolver, enabling visibility, troubleshooting, and security analysis of DNS traffic in AWS environments.
-
A.
RIPEstat
RIPEstat is an online data platform that provides comprehensive information and visualizations about Internet number resources such as IP addresses, prefixes, and ASNs.
-
B.
RIPE Database
The RIPE Database is a public registry of Internet number resources and related contact information used for managing and coordinating IP address and AS number allocations in Europe, the Middle East, and parts of Central Asia.
-
C.
OpenDNS
OpenDNS is a cloud-delivered DNS and security service provider known for web filtering, phishing protection, and enterprise network security solutions.
-
D.
ThousandEyes
ThousandEyes is a network intelligence and digital experience monitoring company, best known for its internet and cloud visibility platform that helps organizations troubleshoot and optimize application performance across complex, distributed environments.
-
E.
Amazon CloudWatch
Amazon CloudWatch is a monitoring and observability service that collects and analyzes logs, metrics, and events from AWS resources and applications to help track performance and operational health.
- F. None of above. chosen
Statements (50)
| Predicate | Object |
|---|---|
| instanceOf |
Amazon Web Services feature
ⓘ
DNS query logging feature ⓘ |
| appliesTo | Route 53 Resolver NERFINISHED ⓘ |
| billingModel |
additional charges for log storage in destination services
ⓘ
pay-per-query logging charges ⓘ |
| canDeliverTo |
Amazon CloudWatch Logs
NERFINISHED
ⓘ
Amazon Kinesis Data Firehose NERFINISHED ⓘ Amazon S3 NERFINISHED ⓘ |
| captures |
queries from VPCs that use Route 53 Resolver
ⓘ
queries from inbound Resolver endpoints ⓘ queries from outbound Resolver endpoints ⓘ |
| configuredPer |
VPC
ⓘ
query logging configuration ⓘ |
| documentationURL | https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-query-logs.html ⓘ |
| enables |
detection of data exfiltration via DNS
ⓘ
detection of suspicious DNS patterns ⓘ forensic analysis of DNS activity ⓘ |
| includesField |
VPC ID
ⓘ
query name ⓘ query timestamp ⓘ query type ⓘ resolver endpoint ID ⓘ response code ⓘ source IP address ⓘ |
| integratesWith |
AWS CloudTrail for configuration auditing
ⓘ
AWS Security Hub via downstream log analysis ⓘ Amazon GuardDuty DNS-based findings via log-derived signals ⓘ |
| partOf | Amazon Route 53 NERFINISHED ⓘ |
| providedBy | Amazon Web Services NERFINISHED ⓘ |
| records |
DNS queries
ⓘ
DNS query metadata ⓘ |
| regionScope | AWS Region-specific configuration ⓘ |
| requires |
IAM permissions to configure logging
ⓘ
a destination resource such as CloudWatch Logs log group ⓘ a destination resource such as Kinesis Data Firehose delivery stream ⓘ a destination resource such as S3 bucket ⓘ |
| scope | DNS queries that use Route 53 Resolver in a VPC ⓘ |
| supports |
filtering by VPC
ⓘ
filtering by query direction ⓘ filtering by query type ⓘ logging of queries forwarded to on-premises DNS ⓘ logging of queries forwarded to other DNS resolvers ⓘ logging of queries to private hosted zones ⓘ logging of queries to public hosted zones ⓘ multi-account logging via centralized destinations ⓘ |
| supportsEnvironment | AWS VPC environments NERFINISHED ⓘ |
| usedFor |
DNS troubleshooting
ⓘ
compliance and auditing of DNS activity ⓘ security analysis of DNS traffic ⓘ visibility into DNS traffic ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: Route 53 Resolver Query Logs Description of subject: Route 53 Resolver Query Logs is an Amazon Route 53 feature that records DNS queries made through the Route 53 Resolver, enabling visibility, troubleshooting, and security analysis of DNS traffic in AWS environments.
Referenced by (1)
Full triples — surface form annotated when it differs from this entity's canonical label.