aws-cdk-lib.aws_route53.CfnKeySigningKeyProps

CfnKeySigningKeyProps Struct

Properties for defining a CfnKeySigningKey.

CfnKeySigningKeyProps

used as props by

• CfnKeySigningKey

Source

Generated code

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_route53 as route53 } from 'aws-cdk-lib';
const cfnKeySigningKeyProps: route53.CfnKeySigningKeyProps = {
  hostedZoneId: 'hostedZoneId',
  keyManagementServiceArn: 'keyManagementServiceArn',
  name: 'name',
  status: 'status',
};

Properties

hostedZoneIdstringhosted_zone_idstrhostedZoneIdStringHostedZoneIdstringHostedZoneId*stringrequired#

The unique string (ID) that is used to identify a hosted zone.

For example: Z00001111A1ABCaaABC11 .

keyManagementServiceArnstringkey_management_service_arnstrkeyManagementServiceArnStringKeyManagementServiceArnstringKeyManagementServiceArn*stringrequired#

The Amazon resource name (ARN) for a customer managed customer master key (CMK) in AWS Key Management Service ( AWS ).

The KeyManagementServiceArn must be unique for each key-signing key (KSK) in a single hosted zone. For example: arn:aws:kms:us-east-1:111122223333:key/111a2222-a11b-1ab1-2ab2-1ab21a2b3a111 .

namestringnamestrnameStringNamestringName*stringrequired#

A string used to identify a key-signing key (KSK).

Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.

statusstringstatusstrstatusStringStatusstringStatus*stringrequired#

A string that represents the current key-signing key (KSK) status.

notes

Status can have one of the following values:

• ACTIVE - The KSK is being used for signing.
• INACTIVE - The KSK is not being used for signing.
• DELETING - The KSK is in the process of being deleted.
• ACTION_NEEDED - There is a problem with the KSK that requires you to take action to resolve. For example, the customer managed key might have been deleted, or the permissions for the customer managed key might have been changed.
• INTERNAL_FAILURE - There was an error during a request. Before you can continue to work with DNSSEC signing, including actions that involve this KSK, you must correct the problem. For example, you may need to activate or deactivate the KSK.