1. Sign in to the AWS Management Console: Go to https://aws.amazon.com/ and sign in to the AWS Management Console using your credentials.
2. Navigate to Route 53: Click on the ‘Services’ dropdown menu at the top of the console, then select ‘Route 53’ under the ‘Networking & Content Delivery’ section.
3. Enable Query Logging: In the Route 53 console, click on ‘Query logging’ in the left-hand navigation pane.
4. Create a Query Logging Configuration: Click on the ‘Create query logging configuration’ button.
5. Configure Query Logging:
   • Log group: Select an existing CloudWatch Logs log group or create a new one where the query logs will be stored.
   • Log group role: Choose an IAM role that grants Route 53 permission to write logs to the selected log group.
   • Destination: Choose whether you want to log queries for all hosted zones or specific hosted zones.
   • Filter: You can optionally add a filter to log only specific queries based on criteria like domain name, query type, etc.
   • Enable query logging: Check the box to enable query logging.
6. Review and Create: Review the configuration settings to ensure they are correct, then click on the ‘Create’ button to enable query logging.
7. Verify Configuration: Once the query logging configuration is created, you can verify that query logging is enabled by checking the status in the Route 53 console.

​

1. Enable Query Logging: Use the following AWS CLI command to enable query logging for your Route 53 hosted zone. Replace HOSTED_ZONE_ID with the ID of your hosted zone.

aws route53 create-query-logging-config --hosted-zone-id HOSTED_ZONE_ID --cloud-watch-logs-log-group /aws/route53/QUERY_LOGS

2. Verify Configuration: To verify that query logging has been enabled successfully, you can describe the query logging configuration using the following AWS CLI command:

aws route53 list-query-logging-configs --hosted-zone-id HOSTED_ZONE_ID

3. Review Query Logs: Once query logging is enabled, you can review the query logs in the CloudWatch Logs group /aws/route53/QUERY_LOGS.

1. Install Boto3: If you haven’t already installed Boto3, you can install it using pip:
   pip install boto3
   
2. Configure AWS Credentials: Make sure you have configured your AWS credentials either by setting environment variables or using the AWS CLI aws configure command.
3. Write Python script: Create a Python script with the following code to enable query logging for Route 53:
   import boto3
   
   def enable_query_logging():
       client = boto3.client('route53')
   
       hosted_zones = client.list_hosted_zones()['HostedZones']
       for zone in hosted_zones:
           hosted_zone_id = zone['Id'].split('/')[-1]
           response = client.get_hosted_zone(Id=hosted_zone_id)
           if response['HostedZone']['QueryLoggingConfig']['CloudWatchLogsLogGroupArn'] == '':
               client.create_query_logging_config(
                   HostedZoneId=hosted_zone_id,
                   CloudWatchLogsLogGroupArn='YOUR_CLOUDWATCH_LOG_GROUP_ARN'
               )
               print(f"Query logging enabled for hosted zone {hosted_zone_id}")
   
   if __name__ == '__main__':
       enable_query_logging()
   
   Replace 'YOUR_CLOUDWATCH_LOG_GROUP_ARN' with the ARN of the CloudWatch Logs log group where you want to store the query logs.
4. Run the Python script: Execute the Python script to enable query logging for all hosted zones in your AWS account:
   python enable_query_logging.py
   
5. Verify the configuration: After running the script, verify that query logging has been enabled for all hosted zones by checking the Route 53 console or using the Boto3 SDK to confirm the configuration.