The Amazon resource name (ARN) for a customer managed customer master key (CMK) in Key Management Service (KMS). The KeyManagementServiceArn must be unique for each key-signing key (KSK) in a single hosted zone. To see an example of KeyManagementServiceArn that grants the correct permissions for DNSSEC, scroll down to Example.

You must configure the customer managed CMK as follows:

Status

Enabled

Key spec

ECC_NIST_P256

Key usage

Sign and verify

Key policy

The key policy must give permission for the following actions:

DescribeKey
GetPublicKey
Sign

The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:

\"Service\": \"dnssec-route53.amazonaws.com\"

For more information about working with a customer managed CMK in KMS, see Key Management Service concepts.

",{"_3271":3291},[3292,3294],{"_3274":3293},"#/definitions/448858",{"_23":3295},"A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.",{"_3271":3297},[3298,3300],{"_3274":3299},"#/definitions/448893",{"_23":3301},"A string specifying the initial status of the key-signing key (KSK). You can set the value to ACTIVE or INACTIVE.","x-apidog-orders",[3264,3265,3266,3267,3080],"definitions",{"_3306":3307,"_3311":3312,"_3316":3317,"_3319":3320,"_3321":3322,"_3325":3326},"448854",{"_5":3308,"_3309":3310,"_30":2205,"_22":2205},"string","maxLength",32,"448858",{"_5":3308,"_3313":3314,"_3309":3315,"_30":2210,"_22":2210},"minLength",3,128,"448887",{"_5":3308,"_3313":3318,"_3309":3315,"_30":2380,"_22":2380},1,"448892",{"_5":3308,"_30":2405,"_22":2405},"448893",{"_5":3308,"_3313":3323,"_3309":3324,"_30":2410,"_22":2410},5,150,"448894",{"_5":3261,"_3262":3263,"_30":2415,"_3268":3269,"_3302":3303,"_22":2415},"extraData",{"_3329":3330,"_3331":3305,"_3332":3333,"_23":117,"_3334":117},"apiFieldList",[],"dataSchemaDefinitions","example","{\n \"CallerReference\": \"string\",\n \"HostedZoneId\": \"string\",\n \"KeyManagementServiceArn\": \"string\",\n \"Name\": \"string\",\n \"Status\": \"string\"\n}","displayName","docsIdTypeData",{"_3337":3338,"_3339":3340,"_3341":3340,"_3342":3343,"_3344":3345,"_3346":3347,"_3348":117,"_3349":-7},"onlineType","APIDOC","onlineId",345972,"projectId","teamId",97,"branchId",309106,"visitType","withId","subdirectory","specialFileType","notification",[],"footerBanner",[],"projectSetting",{"_3356":3357,"_3358":3359,"_3373":3374,"_3375":3376,"_3377":3378,"_3379":3380},"auth",{},"advancedSettings",{"_3360":156,"_3361":156,"_3362":51,"_3363":3314,"_3364":156,"_3365":156,"_3366":3367},"enableJsonc","enableBigint","responseValidate","isDefaultUrlEncoding","enableTestScenarioSetting","enableYAPICompatScript","publishedDocUrlRules",{"_3368":3369,"_3370":3371,"_3372":51},"defaultRule","RESOURCE_KEY_ONLY","resourceKeyStandard","LEGACY","enableResourceKeyStandard","securityScheme",{},"mockSettings",{},"preProcessors",[],"postProcessors",[],"environments",{"_3383":3384,"_3425":3426,"_3490":3491},"selectedEnvironment",{"_176":3385,"_22":3386,"_3387":3388,"_3389":3390,"_3391":3392,"_3393":3394,"_3395":3396,"_3397":3398,"_3399":3400,"_3409":3410,"_5":3411,"_3412":3413,"_3341":3340,"_3414":3415,"_3416":3417,"_3418":175,"_202":3419,"_3420":3417,"_3421":3422,"_3423":3422,"_3358":3424},356467,"The Amazon Route 53 Domains multi-region endpoint","baseUrl","http://route53domains.{region}.amazonaws.com","baseUrls",{"_3235":3388},"websocketBaseUrls",{},"socketioBaseUrls",{},"requestProxyAgentSettings",{},"variables",[],"parameters",{"_3401":3402,"_3403":3404,"_3405":3406,"_3407":3408},"cookie",[],"query",[],"header",[],"body",[],"registrationCenters",[],"normal","visibility","protected","projectType","HTTP","creatorId",345038,"ordering",[],"editorId","createdAt","2022-09-10T21:12:42.000Z","updatedAt",{},"environmentList",[3427,3441,3458,3474],{"_176":3385,"_22":3386,"_3387":3388,"_3389":3428,"_3391":3429,"_3393":3430,"_3395":3431,"_3397":3432,"_3399":3433,"_3409":3438,"_5":3411,"_3412":3413,"_3341":3340,"_3414":3415,"_3416":3417,"_3418":175,"_202":3439,"_3420":3417,"_3421":3422,"_3423":3422,"_3358":3440},{"_3235":3388},{},{},{},[],{"_3401":3434,"_3403":3435,"_3405":3436,"_3407":3437},[],[],[],[],[],[],{},{"_176":3442,"_22":3443,"_3387":3444,"_3389":3445,"_3391":3446,"_3393":3447,"_3395":3448,"_3397":3449,"_3399":3450,"_3409":3455,"_5":3411,"_3412":3413,"_3341":3340,"_3414":3415,"_3416":3417,"_3418":175,"_202":3456,"_3420":3417,"_3421":3422,"_3423":3422,"_3358":3457},356468,"The Amazon Route 53 Domains endpoint for China (Beijing) and China (Ningxia)","http://route53domains.{region}.amazonaws.com.cn",{"_3235":3444},{},{},{},[],{"_3401":3451,"_3403":3452,"_3405":3453,"_3407":3454},[],[],[],[],[],[],{},{"_176":3459,"_22":3386,"_3387":3460,"_3389":3461,"_3391":3462,"_3393":3463,"_3395":3464,"_3397":3465,"_3399":3466,"_3409":3471,"_5":3411,"_3412":3413,"_3341":3340,"_3414":3415,"_3416":3417,"_3418":175,"_202":3472,"_3420":3417,"_3421":3422,"_3423":3422,"_3358":3473},356469,"https://route53domains.{region}.amazonaws.com",{"_3235":3460},{},{},{},[],{"_3401":3467,"_3403":3468,"_3405":3469,"_3407":3470},[],[],[],[],[],[],{},{"_176":3475,"_22":3443,"_3387":3476,"_3389":3477,"_3391":3478,"_3393":3479,"_3395":3480,"_3397":3481,"_3399":3482,"_3409":3487,"_5":3411,"_3412":3413,"_3341":3340,"_3414":3415,"_3416":3417,"_3418":175,"_202":3488,"_3420":3417,"_3421":3422,"_3423":3422,"_3358":3489},356470,"https://route53domains.{region}.amazonaws.com.cn",{"_3235":3476},{},{},{},[],{"_3401":3483,"_3403":3484,"_3405":3485,"_3407":3486},[],[],[],[],[],[],{},"servers",[3492],{"_176":3235,"_22":3493},"Default Server","searchSettings",{},"versionSettings",[3498],{"_3344":3345,"_3499":51,"_22":3255,"_3500":3255,"_3381":3501},"isDefaultVersion","slug",{"_3502":3503,"_3504":3385},"environmentIds",[3385,3442,3459,3475],"defaultEnvironmentId","seoInfos",["M"],"itemPathPrefix",{"_3387":61,"_3509":117,"_3348":117,"_3510":156},"versionSlug","isSharedDocIndependentDomain","appEnvMap",{"_3513":129},"appBrowserExtensionAdapterKey","customCodes",{"_3516":117},"javascript","primaryColorVariable",{"_3160":3519,"_3164":3520},"--ui-primary-color-hover: var(--ui-primary-5);--ui-primary-color-active: var(--ui-primary-7);--ui-picker-basic-cell-hover-with-range-color: #36139c;--ui-picker-date-hover-range-border-color: #4e1be0;--ui-primary-base: #9373EE;--ui-primary-base-p: 147, 115, 238;--ui-primary-color-p: 147, 115, 238;--ui-primary-color: #9373EE;--ui-primary-10: #362b50;--ui-primary-9: #51407e;--ui-primary-8: #634e9b;--ui-primary-7: #7a60c4;--ui-primary-7-p: 122, 96, 196;--ui-primary-6: #9373EE;--ui-primary-6-p: 147, 115, 238;--ui-primary-5: #b499f4;--ui-primary-5-p: 180, 153, 244;--ui-primary-4: #cebaf8;--ui-primary-3: #dfd1fb;--ui-primary-2: #ebe2fc;--ui-primary-1: #f3eefe;--ui-primary-1-p: 243, 238, 254;--ui-primary-a: #f7f3fe;--ui-primary-b: #fbf9ff;--g-color-primary: #9373EE;--ui-btn-primary-color: #fff;--ui-lime-6-p: 160,217,17;--ui-orange-6-p: 250,140,22;--ui-yellow-6-p: 250,219,20;--ui-pink-6-p: 235,47,150;--ui-body-background: #ffffff;--theme-tars-item-active-bg: var(--ui-tree-node-selected-bg);--ifm-menu-color: var(--ui-text-color-sub);--ifm-menu-color-active: var(--ui-text-color-sub);--ifm-menu-color-background-hover: var(--ui-item-hover-bg);--theme-tars-border-color-split: var(--ui-border-color-split);","--ui-primary-color-hover: var(--ui-primary-7);--ui-primary-color-active: var(--ui-primary-5);--ui-picker-basic-cell-hover-with-range-color: #312865;--ui-picker-date-hover-range-border-color: #4b3d9c;--ui-primary-base: #8276C9;--ui-primary-base-p: 130, 118, 201;--ui-primary-color-p: 130, 118, 201;--ui-primary-color: #8276C9;--ui-primary-10: #dcd7f0;--ui-primary-9: #a69bd9;--ui-primary-8: #b0a5dd;--ui-primary-7: #9c90d4;--ui-primary-7-p: 156, 144, 212;--ui-primary-6: #8276C9;--ui-primary-6-p: 130, 118, 201;--ui-primary-5: #635a96;--ui-primary-5-p: 99, 90, 150;--ui-primary-4: #49436c;--ui-primary-3: #393452;--ui-primary-2: #312d46;--ui-primary-1: #252333;--ui-primary-1-p: 37, 35, 51;--ui-primary-a: #21202d;--ui-primary-b: #1e1c28;--g-color-primary: #8276C9;--ui-btn-primary-color: #fff;--ui-lime-6-p: 160,217,17;--ui-orange-6-p: 250,140,22;--ui-yellow-6-p: 250,219,20;--ui-pink-6-p: 235,47,150;--ui-body-background: #1a1922;--theme-tars-item-active-bg: var(--ui-tree-node-selected-bg);--ifm-menu-color: var(--ui-text-color-sub);--ifm-menu-color-active: var(--ui-text-color-sub);--ifm-menu-color-background-hover: var(--ui-item-hover-bg);--theme-tars-border-color-split: var(--ui-border-color-split);","routes/_index/route","actionData","errors"]

CreateKeySigningKeyRequest