Amazon Route 53 パブリックホストゾーンのレコードを一括で出力したのち委任先のサブドメインが有効であるかを一括で確認してみた

% HOSTED_ZONE_ID=Zxxxxxxxxxxxx

% aws route53 list-resource-record-sets --hosted-zone-id $HOSTED_ZONE_ID | \
jq -r '.ResourceRecordSets[] |
  [
    .Name,
    (if .ResourceRecords then (.ResourceRecords | map(.Value) | join(";"))
     elif .AliasTarget then .AliasTarget.DNSName
     else "" end),
    .Type
  ] | @csv' > route53_records.csv

"example.com.","NS","ns-0000.awsdns-00.org.;ns-0000.awsdns-00.net.;ns-0000.awsdns-00.co.uk.;ns-0000.awsdns-00.com."
"example.com.","SOA","ns-0000.awsdns-00.org. hostmaster.example.com. 1 7200 900 1209600 86400"
"chiba.example.com.","NS","ns-0000.awsdns-00.org;ns-0000.awsdns-00.com;ns-0000.awsdns-00.co.uk;ns-0000.awsdns-00.net"
"saitama.example.com.","NS","ns-0000.awsdns-00.org;ns-0000.awsdns-00.com;ns-0000.awsdns-00.co.uk;ns-0000.awsdns-00.net"
"kanagawa.example.com.","NS","ns-0000.awsdns-00.net.;ns-0000.awsdns-00.org.;ns-0000.awsdns-00.co.uk.;ns-0000.awsdns-00.com."
"alb.example.com.","A","dualstack.dummy-lb.example.com."
...

% dig SOA saitama.example.com.

; <<>> DiG 9.10.6 <<>> SOA saitama.example.com.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 5944
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;saitama.example.com.	IN	SOA

;; Query time: 438 msec
;; SERVER: （参照先DNSサーバーの情報）
;; WHEN: Mon Jun 30 15:39:03 JST 2025
;; MSG SIZE  rcvd: 52

% dig SOA saitama.example.com. @ns-0000.awsdns-00.org.

; <<>> DiG 9.10.6 <<>> SOA saitama.example.com. @ns-0000.awsdns-00.org.
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 21874
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;saitama.example.com.	IN	SOA

;; Query time: 155 msec
;; SERVER: （参照先DNSサーバーの情報）
;; WHEN: Mon Jun 30 15:44:14 JST 2025
;; MSG SIZE  rcvd: 41

% dig SOA saitama.example.com. @ns-0000.awsdns-00.org. +short
%

#!/bin/bash

# Usage check
if [[ $# -ne 1 ]]; then
  echo "Usage: $0 <CSV file path>"
  exit 1
fi

INPUT_FILE="$1"
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
OUTPUT_FILE="soa_check_results_$TIMESTAMP.csv"

# Validate file
if [[ ! -f "$INPUT_FILE" ]]; then
  echo "File not found: $INPUT_FILE"
  exit 1
fi

total_records=$(wc -l < "$INPUT_FILE")
echo "Name,Type,Result" > "$OUTPUT_FILE"

count=0

while IFS=',' read -r domain type ns_raw; do
  domain=$(echo "$domain" | tr -d '"')
  type=$(echo "$type" | tr -d '"')
  ns_raw=$(echo "$ns_raw" | tr -d '"')

  count=$((count + 1))
  if (( count % 10 == 1 )); then
    echo "Processing $count of $total_records..."
  fi

  if [[ "$type" != "NS" ]]; then
    echo "$domain,$type,SKIPPED" >> "$OUTPUT_FILE"
    continue
  fi

  IFS=';' read -ra ns_list <<< "$ns_raw"
  all_ok=true

  for ns in "${ns_list[@]}"; do
    ns=$(echo "$ns" | xargs)  # Trim whitespace
    [[ -z "$ns" ]] && continue
    if ! dig SOA "$domain" @"$ns" +short | grep -q .; then
      all_ok=false
      break
    fi
  done

  result="FAILED"
  $all_ok && result="OK"
  echo "$domain,$type,$result" >> "$OUTPUT_FILE"
done < "$INPUT_FILE"

echo "Processing completed. Results have been saved to: $OUTPUT_FILE"

% bash subdomain_checker.sh route53_records.csv
Processing 1 of      181...
Processing 11 of      181...
Processing 21 of      181...
Processing 31 of      181...
Processing 41 of      181...
Processing 51 of      181...
Processing 61 of      181...
Processing 71 of      181...
Processing 81 of      181...
Processing 91 of      181...
Processing 101 of      181...
Processing 111 of      181...
Processing 121 of      181...
Processing 131 of      181...
Processing 141 of      181...
Processing 151 of      181...
Processing 161 of      181...
Processing 171 of      181...
Processing 181 of      181...
Processing completed. Results have been saved to: soa_check_results_20250630_160036.csv

Name,Type,Result
example.com.,NS,OK
example.com.,SOA,SKIPPED
example.com.,TXT,SKIPPED
chiba.example.com.,NS,FAILED
saitama.example.com.,NS,FAILED
kanagawa.example.com.,NS,FAILED
...