View a markdown version of this page

Prerequisites for dependency discovery - AWS Resilience Hub

Prerequisites for dependency discovery

Before you enable dependency discovery, ensure the following requirements are met:

  • Your service must have compute resources (Amazon Elastic Compute Cloud instances, Amazon Elastic Container Service tasks, Amazon Elastic Kubernetes Service pods, or VPC bound Lambda functions) that make DNS queries through Route 53 resolvers.

  • The compute resources must reside in a VPC configured to use Route 53 DNS resolvers.

  • Next generation Resilience Hub discovers either Amazon Elastic Compute Cloud instances (preferred) or Amazon VPC (fallback). This can be verified by viewing the Service topology in the console.

  • No additional IAM permissions are required beyond the standard invoker role – dependency discovery uses Next generation Resilience Hub's own service credentials to access DNS query data.