activate_key_signing_key
¶
activate_key_signing_key(
hosted_zone_id: ResourceId,
name: SigningKeyName,
*,
config_overrides: Optional[Route53ClientConfig] = None,
) -> ActivateKeySigningKeyResponse
Activates a key-signing key (KSK) so that it can be used for signing by DNSSEC. This operation changes the KSK status to ACTIVE.
Parameters:
-
hosted_zone_id(ResourceId) –A unique string used to identify a hosted zone.
-
name(SigningKeyName) –A string used to identify a key-signing key (KSK).
Namecan include numbers, letters, and underscores (_).Namemust be unique for each key-signing key in the same hosted zone.
Raises:
-
ConcurrentModification–Another user submitted a request to create, update, or delete the object at the same time that you did. Retry the request.
-
InvalidInput–The input is not valid.
-
InvalidKeySigningKeyStatus–The key-signing key (KSK) status isn't valid or another KSK has the status
INTERNAL_FAILURE. -
InvalidKMSArn–The KeyManagementServiceArn that you specified isn't valid to use with DNSSEC signing.
-
InvalidSigningStatus–Your hosted zone status isn't valid for this operation. In the hosted zone, change the status to enable
DNSSECor disableDNSSEC. -
NoSuchKeySigningKey–The specified key-signing key (KSK) doesn't exist.
-
UnknownServiceError–The service returned an error code this client does not model.