Skip to main content

key_signing_keys

Retrieves a list of key_signing_keys in a region

Overview

Namekey_signing_keys
TypeResource
Descriptionkey_signing_keys
Idawscc.route53.key_signing_keys

Fields

NameDatatypeDescription
hosted_zone_idstringThe unique string (ID) used to identify a hosted zone.
namestringAn alphanumeric string used to identify a key signing key (KSK). Name must be unique for each key signing key in the same hosted zone.
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
hosted_zone_id,
name
FROM awscc.route53.key_signing_keys

Permissions

To operate on the key_signing_keys resource, the following permissions are required:

Create

route53:CreateKeySigningKey,
kms:DescribeKey,
kms:GetPublicKey,
kms:Sign,
kms:CreateGrant

List

route53:GetDNSSEC,
route53:ListHostedZones