| Name | Version |
|---|---|
| terraform | >= 1.9 |
| aws | >= 5.60 |
| Name | Version |
|---|---|
| aws | >= 5.60 |
No modules.
| Name | Type |
|---|---|
| aws_cloudwatch_log_resource_policy.route53_query_logging_policy | resource |
| aws_kms_alias.dnssec_key_alias | resource |
| aws_kms_key.dnssec_key | resource |
| aws_kms_key_policy.dnssec_signing_kms_key_policy | resource |
| aws_caller_identity.current | data source |
| aws_iam_policy_document.dnssec_key_policy_document | data source |
| aws_iam_policy_document.route53_query_logging_policy | data source |
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| dnssec_hosted_zone_ids | List of hosted zones ids to use dnssec with. | list(string) |
[] |
no |
| enable_key_rotation | Specifies whether dnsseckey rotation is enabled. Defaults to false. | bool |
false |
no |
| key_deletion_window_in_days | The waiting period, specified in number of days. Defaults to 7. | number |
7 |
no |
| Name | Description |
|---|---|
| dnssec_key_alias_arn | The Amazon Resource Name (ARN) of the key alias. |
| dnssec_key_alias_name | The display name of the alias. |
| dnssec_key_arn | The Amazon Resource Name (ARN) of the key. |
| dnssec_key_id | The globally unique identifier for the key. |