This script can be used to sync and confirm record sets between Route53 Hosted Zones.

sync_hosted_zones.py

#!/usr/bin/env python3
"""
This script can be used to sync and confirm record sets between Route53 Hosted Zones.
"""

from pprint import pprint
import uuid

import boto3
import click


def create_client(service_name, role_arn):
    def _assumed_role_session(role_arn):
        sts_client = boto3.client("sts")

        assumed_role_object = sts_client.assume_role(
            RoleArn=role_arn, RoleSessionName=uuid.uuid1().hex
        )

        credentials = assumed_role_object["Credentials"]

        session = boto3.Session(
            aws_access_key_id=credentials["AccessKeyId"],
            aws_secret_access_key=credentials["SecretAccessKey"],
            aws_session_token=credentials["SessionToken"],
        )

        return session

    session = _assumed_role_session(role_arn)
    return session.client(service_name)


def get_records(client, hosted_zone):
    paginator = client.get_paginator('list_resource_record_sets')
        
    for page in paginator.paginate(HostedZoneId=hosted_zone):
        for record in page['ResourceRecordSets']:
            yield record

            
def upsert_record(client, hosted_zone, record_set):
    return client.change_resource_record_sets(
        HostedZoneId=hosted_zone,
        ChangeBatch={
            'Comment': 'Created by sync_hosted_zones.py',
            'Changes': [
                {
                    'Action': 'UPSERT',
                    'ResourceRecordSet': record_set
                }
            ]
        }
    )            


@click.group()
def cli():
    pass


@click.command()
@click.option("--source_role_arn", help="Role ARN for accessing Source account")
@click.option("--source_hosted_zone", help="Hosted Zone ID for Source")
@click.option("--target_role_arn", help="Role ARN for accessing Target account")
@click.option("--target_hosted_zone", help="Hosted Zone ID for Target")
def sync(source_role_arn, source_hosted_zone, target_role_arn, target_hosted_zone):
    source_r53_client = create_client('route53', source_role_arn)
    target_r53_client = create_client('route53', target_role_arn)
    
    request_ids = []
    
    for record_set in get_records(source_r53_client,source_hosted_zone):
        response = upsert_record(target_r53_client, target_hosted_zone, record_set)
        request_ids.append(response['ResponseMetadata']['RequestId'])
 
    print(f"Request IDs: {request_ids}")
    

@click.command()
@click.option("--source_role_arn", help="Role ARN for accessing Source account")
@click.option("--source_hosted_zone", help="Hosted Zone ID for Source")
@click.option("--target_role_arn", help="Role ARN for accessing Target account")
@click.option("--target_hosted_zone", help="Hosted Zone ID for Target")
def confirm(source_role_arn, source_hosted_zone, target_role_arn, target_hosted_zone):
    source_r53_client = create_client('route53', source_role_arn)
    target_r53_client = create_client('route53', target_role_arn)
    
    source_records = list(get_records(source_r53_client,source_hosted_zone))
    target_records = list(get_records(target_r53_client,target_hosted_zone))
        
    if(source_records == target_records):
        print("MATCH")
    else:
        print("NO MATCH")


cli.add_command(sync)
cli.add_command(confirm)

if __name__ == "__main__":
    cli()