Skip to content

associate_delegation_signer_to_domain

associate_delegation_signer_to_domain(
    domain_name: DomainName,
    signing_attributes: DnssecSigningAttributes,
    *,
    config_overrides: Optional[Route53DomainsClientConfig] = None,
) -> AssociateDelegationSignerToDomainResponse

Creates a delegation signer (DS) record in the registry zone for this domain name.

Note that creating DS record at the registry impacts DNSSEC validation of your DNS records. This action may render your domain name unavailable on the internet if the steps are completed in the wrong order, or with incorrect timing. For more information about DNSSEC signing, see Configuring DNSSEC signing in the Route 53 developer guide.

Parameters:

  • domain_name (DomainName) –

    The name of the domain.

  • signing_attributes (DnssecSigningAttributes) –

    The information about a key, including the algorithm, public key-value, and flags.

Raises:

  • DnssecLimitExceeded –

    This error is returned if you call AssociateDelegationSignerToDomain when the specified domain has reached the maximum number of DS records. You can't add any additional DS records unless you delete an existing one first.

  • DuplicateRequest –

    The request is already in progress for the domain.

  • InvalidInput –

    The requested item is not acceptable. For example, for APIs that accept a domain name, the request might specify a domain name that doesn't belong to the account that submitted the request. For AcceptDomainTransferFromAnotherAwsAccount, the password might be invalid.

  • OperationLimitExceeded –

    The number of operations or jobs running exceeded the allowed threshold for the account.

  • TLDRulesViolation –

    The top-level domain does not support this operation.

  • UnsupportedTLD –

    Amazon Route 53 does not support this top-level domain (TLD).

  • UnknownServiceError –

    The service returned an error code this client does not model.

Source code in docs_src/capo_route_53_domains/_services/route53_domains.py
def associate_delegation_signer_to_domain(
    self,
    domain_name: "capo_route_53_domains.types.domain_name.DomainName",
    signing_attributes: "capo_route_53_domains.types.dnssec_signing_attributes.DnssecSigningAttributes",
    *,
    config_overrides: Optional[Route53DomainsClientConfig] = None,
) -> "capo_route_53_domains.types.associate_delegation_signer_to_domain_response.AssociateDelegationSignerToDomainResponse":
    """<p> Creates a delegation signer (DS) record in the registry zone for this domain name.</p> <p>Note that creating DS record at the registry impacts DNSSEC validation of your DNS records. This action may render your domain name unavailable on the internet if the steps are completed in the wrong order, or with incorrect timing. For more information about DNSSEC signing, see <a href="https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec.html">Configuring DNSSEC signing</a> in the <i>Route 53 developer guide</i>.</p>

    Args:
        domain_name: <p>The name of the domain.</p>
        signing_attributes: <p>The information about a key, including the algorithm, public key-value, and flags.</p>

    Raises:
        capo_route_53_domains.errors.dnssec_limit_exceeded.DnssecLimitExceeded: <p> This error is returned if you call <code>AssociateDelegationSignerToDomain</code> when the specified domain has reached the maximum number of DS records. You can't add any additional DS records unless you delete an existing one first. </p>
        capo_route_53_domains.errors.duplicate_request.DuplicateRequest: <p>The request is already in progress for the domain.</p>
        capo_route_53_domains.errors.invalid_input.InvalidInput: <p>The requested item is not acceptable. For example, for APIs that accept a domain name, the request might specify a domain name that doesn't belong to the account that submitted the request. For <code>AcceptDomainTransferFromAnotherAwsAccount</code>, the password might be invalid.</p>
        capo_route_53_domains.errors.operation_limit_exceeded.OperationLimitExceeded: <p>The number of operations or jobs running exceeded the allowed threshold for the account.</p>
        capo_route_53_domains.errors.tld_rules_violation.TLDRulesViolation: <p>The top-level domain does not support this operation.</p>
        capo_route_53_domains.errors.unsupported_tld.UnsupportedTLD: <p>Amazon Route 53 does not support this top-level domain (TLD).</p>
        capo_route_53_domains.errors.UnknownServiceError: The service returned an error code this client does not model.
    """

    def _handler(
        req: "OperationRequest[capo_route_53_domains.types.associate_delegation_signer_to_domain_request.AssociateDelegationSignerToDomainRequest]",
    ) -> OperationResponse[
        "capo_route_53_domains.types.associate_delegation_signer_to_domain_response.AssociateDelegationSignerToDomainResponse"
    ]:
        import capo_route_53_domains._operations.route53_domains_v20140515.associate_delegation_signer_to_domain

        output, http_response = (
            capo_route_53_domains._operations.route53_domains_v20140515.associate_delegation_signer_to_domain.associate_delegation_signer_to_domain(
                req.options, req.input
            )
        )
        return OperationResponse(output=output, response=http_response)

    interceptors_, options_ = self.operation_options(
        config_overrides, OperationLogging("AssociateDelegationSignerToDomain")
    )
    input_: capo_route_53_domains.types.associate_delegation_signer_to_domain_request.AssociateDelegationSignerToDomainRequest = {
        "domain_name": domain_name,
        "signing_attributes": signing_attributes,
    }

    response = execute_pipeline(
        OperationRequest(input=input_, options=options_),
        handler=_handler,
        interceptors=list(interceptors_),
    )
    response.response.close()
    return response.output