GetDNSSEC - Amazon Route 53


Returns information about DNSSEC for a specific hosted zone, including the key-signing keys (KSKs) in the hosted zone.

Request Syntax

GET /2013-04-01/hostedzone/Id/dnssec HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.


A unique string used to identify a hosted zone.

Length Constraints: Maximum length of 32.

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 <?xml version="1.0" encoding="UTF-8"?> <GetDNSSECResponse> <KeySigningKeys> <KeySigningKey> <CreatedDate>timestamp</CreatedDate> <DigestAlgorithmMnemonic>string</DigestAlgorithmMnemonic> <DigestAlgorithmType>integer</DigestAlgorithmType> <DigestValue>string</DigestValue> <DNSKEYRecord>string</DNSKEYRecord> <DSRecord>string</DSRecord> <Flag>integer</Flag> <KeyTag>integer</KeyTag> <KmsArn>string</KmsArn> <LastModifiedDate>timestamp</LastModifiedDate> <Name>string</Name> <PublicKey>string</PublicKey> <SigningAlgorithmMnemonic>string</SigningAlgorithmMnemonic> <SigningAlgorithmType>integer</SigningAlgorithmType> <Status>string</Status> <StatusMessage>string</StatusMessage> </KeySigningKey> </KeySigningKeys> <Status> <ServeSignature>string</ServeSignature> <StatusMessage>string</StatusMessage> </Status> </GetDNSSECResponse>

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in XML format by the service.


Root level tag for the GetDNSSECResponse parameters.

Required: Yes


The key-signing keys (KSKs) in your account.

Type: Array of KeySigningKey objects


A string representing the status of DNSSEC.

Type: DNSSECStatus object


For information about the errors that are common to all actions, see Common Errors.


Parameter name is not valid.

HTTP Status Code: 400


The input is not valid.

HTTP Status Code: 400


No hosted zone exists with the ID that you specified.

HTTP Status Code: 404

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: