Package software.amazon.awscdk.services.route53

Interface ZoneSigningOptions

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

ZoneSigningOptions.Jsii$Proxy

@Generated(value="jsii-pacmak/1.119.0 (build 1634eac)",
           date="2025-11-17T14:40:59.581Z")
@Stability(Stable)
public interface ZoneSigningOptions
extends software.amazon.jsii.JsiiSerializable

Options for enabling key signing from a hosted zone.

Example:

 Key kmsKey = Key.Builder.create(this, "KmsCMK")
         .keySpec(KeySpec.ECC_NIST_P256)
         .keyUsage(KeyUsage.SIGN_VERIFY)
         .build();
 HostedZone hostedZone = HostedZone.Builder.create(this, "HostedZone")
         .zoneName("example.com")
         .build();
 // Enable DNSSEC signing for the zone
 hostedZone.enableDnssec(ZoneSigningOptions.builder().kmsKey(kmsKey).build());
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static final class	ZoneSigningOptions.Builder	A builder for ZoneSigningOptions
static final class	ZoneSigningOptions.Jsii$Proxy	An implementation for ZoneSigningOptions

Method Summary

Modifier and Type	Method	Description
static ZoneSigningOptions.Builder	builder()
default String	getKeySigningKeyName()	The name for the key signing key.
IKey	getKmsKey()	The customer-managed KMS key that that will be used to sign the records.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Details

getKmsKey

@Stability(Stable)
@NotNull
IKey getKmsKey()

The customer-managed KMS key that that will be used to sign the records.

The KMS Key must be unique for each KSK within a hosted zone. Additionally, the KMS key must be an asymetric customer-managed key using the ECC_NIST_P256 algorithm.

See Also:

• https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-cmk-requirements.html

getKeySigningKeyName

@Stability(Stable)
@Nullable
default String getKeySigningKeyName()

The name for the key signing key.

This name must be unique within a hosted zone.

Default: an autogenerated name

builder

@Stability(Stable)
static ZoneSigningOptions.Builder builder()

Returns:

a ZoneSigningOptions.Builder of ZoneSigningOptions