AWS Fundamentals Logo
AWS Fundamentals
AWS::Route53::DNSSEC

Route53 DNSSEC

Resource used to control (enable/disable) DNSSEC in a specific hosted zone.

Properties

1 configurable property. 1 required. Click a row to see details.

Filter:
PropertyTypeFlags
HostedZoneId
string
RequiredCreate-only

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml
AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::Route53::DNSSEC

Resources:
  MyResource:
    Type: AWS::Route53::DNSSEC
    Properties:
      HostedZoneId: "my-hostedzoneid"

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

route53:GetDNSSECroute53:EnableHostedZoneDNSSECkms:DescribeKeykms:GetPublicKeykms:Signkms:CreateGrant

read

route53:GetDNSSEC

delete

route53:GetDNSSECroute53:DisableHostedZoneDNSSECkms:DescribeKeykms:GetPublicKeykms:Signkms:CreateGrant

list

route53:GetDNSSECroute53:ListHostedZones

Get the Route53 Cheat Sheet

Everything you need to know about Route53 on one page. HD quality, print-friendly.

Download Free Infographic

Quick Facts

ServiceRoute53
Properties1
Required1
TaggingNot supported
Primary IDHostedZoneId

Supported Operations

CreateReadDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

HostedZoneId

Related Resources

External Links