AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Creates a new key-signing key (KSK) associated with a hosted zone. You can only have two KSKs per hosted zone.
For .NET Core this operation is only available in asynchronous form. Please refer to CreateKeySigningKeyAsync.
Namespace: Amazon.Route53
Assembly: AWSSDK.Route53.dll
Version: 3.x.y.z
public abstract CreateKeySigningKeyResponse CreateKeySigningKey( CreateKeySigningKeyRequest request )
Container for the necessary parameters to execute the CreateKeySigningKey service method.
| Exception | Condition |
|---|---|
| ConcurrentModificationException | Another user submitted a request to create, update, or delete the object at the same time that you did. Retry the request. |
| InvalidArgumentException | Parameter name is not valid. |
| InvalidInputException | The input is not valid. |
| InvalidKeySigningKeyNameException | The key-signing key (KSK) name that you specified isn't a valid name. |
| InvalidKeySigningKeyStatusException | The key-signing key (KSK) status isn't valid or another KSK has the status INTERNAL_FAILURE. |
| InvalidKMSArnException | The KeyManagementServiceArn that you specified isn't valid to use with DNSSEC signing. |
| InvalidSigningStatusException | Your hosted zone status isn't valid for this operation. In the hosted zone, change the status to enable DNSSEC or disable DNSSEC. |
| KeySigningKeyAlreadyExistsException | You've already created a key-signing key (KSK) with this name or with the same customer managed key ARN. |
| NoSuchHostedZoneException | No hosted zone exists with the ID that you specified. |
| TooManyKeySigningKeysException | You've reached the limit for the number of key-signing keys (KSKs). Remove at least one KSK, and then try again. |
.NET Framework:
Supported in: 4.7.2 and newer