Package software.amazon.awscdk.services.route53

Interface KeySigningKeyProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

KeySigningKeyProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.116.0 (build 0eddcff)",
           date="2025-10-24T13:34:45.930Z")
@Stability(Stable)
public interface KeySigningKeyProps
extends software.amazon.jsii.JsiiSerializable

Properties for constructing a Key Signing Key.

Example:

 HostedZone hostedZone;
 Key kmsKey;
 KeySigningKey.Builder.create(this, "KeySigningKey")
         .hostedZone(hostedZone)
         .kmsKey(kmsKey)
         .keySigningKeyName("ksk")
         .status(KeySigningKeyStatus.ACTIVE)
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	KeySigningKeyProps.Builder	A builder for KeySigningKeyProps
static final class	KeySigningKeyProps.Jsii$Proxy	An implementation for KeySigningKeyProps

Method Summary

Modifier and Type	Method	Description
static KeySigningKeyProps.Builder	builder()
IHostedZone	getHostedZone()	The hosted zone that this key will be used to sign.
default String	getKeySigningKeyName()	The name for the key signing key.
IKey	getKmsKey()	The customer-managed KMS key that that will be used to sign the records.
default KeySigningKeyStatus	getStatus()	The status of the key signing key.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getHostedZone

@Stability(Stable)
@NotNull
IHostedZone getHostedZone()

The hosted zone that this key will be used to sign.

getKmsKey

@Stability(Stable)
@NotNull
IKey getKmsKey()

The customer-managed KMS key that that will be used to sign the records.

The KMS Key must be unique for each KSK within a hosted zone. Additionally, the KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.

See Also:

• https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html

getKeySigningKeyName

@Stability(Stable)
@Nullable
default String getKeySigningKeyName()

The name for the key signing key.

This name must be unique within a hosted zone.

Default: an autogenerated name

getStatus

@Stability(Stable)
@Nullable
default KeySigningKeyStatus getStatus()

The status of the key signing key.

Default: ACTIVE

builder

@Stability(Stable)
static KeySigningKeyProps.Builder builder()

Returns:

a KeySigningKeyProps.Builder of KeySigningKeyProps