# KeySigningKeyProps

Properties for constructing a Key Signing Key.

Extends: KeySigningKeyProps
Used as props by: KeySigningKey

- Source: [`aws-route53/lib/key-signing-key.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-route53/lib/key-signing-key.ts#L15)
- Type last changed: v2.138.0 · 18 Apr 2024

## Example

```ts
declare const hostedZone: route53.HostedZone;
declare const kmsKey: kms.Key;
new route53.KeySigningKey(this, 'KeySigningKey', {
  hostedZone,
  kmsKey,
  keySigningKeyName: 'ksk',
  status: route53.KeySigningKeyStatus.ACTIVE,
});
```

## Properties

- `hostedZone`: [IHostedZone](/cdk/api/v2/docs/aws-cdk-lib.aws_route53.IHostedZone.html) (required) — The hosted zone that this key will be used to sign.

- `keySigningKeyName`: string — The name for the key signing key.

  **Default:** an autogenerated name

  This name must be unique within a hosted zone.

- `kmsKey`: [IKey](/cdk/api/v2/docs/aws-cdk-lib.aws_kms.IKey.html) (required) — The customer-managed KMS key that will be used to sign the records.

  The KMS Key must be unique for each KSK within a hosted zone. Additionally, the
  KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.

- `status`: [KeySigningKeyStatus](/cdk/api/v2/docs/aws-cdk-lib.aws_route53.KeySigningKeyStatus.html) = ACTIVE — The status of the key signing key.