Skip to content
v2.274.0

KeySigningKeyProps Struct ​

Properties for constructing a Key Signing Key.

Example ​

ts
declare const hostedZone: route53.HostedZone;
declare const kmsKey: kms.Key;
new route53.KeySigningKey(this, 'KeySigningKey', {
  hostedZone,
  kmsKey,
  keySigningKeyName: 'ksk',
  status: route53.KeySigningKeyStatus.ACTIVE,
});

Properties ​

hostedZoneIHostedZonehosted_zoneIHostedZonehostedZoneIHostedZoneHostedZoneIHostedZoneHostedZoneIHostedZonerequired#
The hosted zone that this key will be used to sign.
keySigningKeyNameoptionalstringkey_signing_key_nameoptionalstrkeySigningKeyNameoptionalStringKeySigningKeyNameoptionalstringKeySigningKeyNameoptional*string#
The name for the key signing key.

Default: an autogenerated name

This name must be unique within a hosted zone.

kmsKeyIKeykms_keyIKeykmsKeyIKeyKmsKeyIKeyKmsKeyIKeyrequired#
The customer-managed KMS key that will be used to sign the records.

The KMS Key must be unique for each KSK within a hosted zone. Additionally, the KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.

statusoptionalKeySigningKeyStatusstatusoptionalKeySigningKeyStatusstatusoptionalKeySigningKeyStatusStatusoptionalKeySigningKeyStatusStatusoptionalKeySigningKeyStatus= ACTIVE#
The status of the key signing key.