EnableHostedZoneDNSSEC - Amazon Route 53
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

EnableHostedZoneDNSSEC

Enables DNSSEC signing in a specific hosted zone.

Request Syntax

POST /2013-04-01/hostedzone/Id/enable-dnssec HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.

Id

A unique string used to identify a hosted zone.

Length Constraints: Maximum length of 32.

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 <?xml version="1.0" encoding="UTF-8"?> <EnableHostedZoneDNSSECResponse> <ChangeInfo> <Comment>string</Comment> <Id>string</Id> <Status>string</Status> <SubmittedAt>timestamp</SubmittedAt> </ChangeInfo> </EnableHostedZoneDNSSECResponse>

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in XML format by the service.

EnableHostedZoneDNSSECResponse

Root level tag for the EnableHostedZoneDNSSECResponse parameters.

Required: Yes

ChangeInfo

A complex type that describes change information about changes made to your hosted zone.

Type: ChangeInfo object

Errors

For information about the errors that are common to all actions, see Common Errors.

ConcurrentModification

Another user submitted a request to create, update, or delete the object at the same time that you did. Retry the request.

HTTP Status Code: 400

DNSSECNotFound

The hosted zone doesn't have any DNSSEC resources.

HTTP Status Code: 400

HostedZonePartiallyDelegated

The hosted zone nameservers don't match the parent nameservers. The hosted zone and parent must have the same nameservers.

HTTP Status Code: 400

InvalidArgument

Parameter name is not valid.

HTTP Status Code: 400

InvalidInput

The input is not valid.

HTTP Status Code: 400

InvalidKeySigningKeyStatus

The key-signing key (KSK) status isn't valid or another KSK has the status INTERNAL_FAILURE.

HTTP Status Code: 400

InvalidKMSArn

The KeyManagementServiceArn that you specified isn't valid to use with DNSSEC signing.

HTTP Status Code: 400

KeySigningKeyWithActiveStatusNotFound

A key-signing key (KSK) with ACTIVE status wasn't found.

HTTP Status Code: 400

NoSuchHostedZone

No hosted zone exists with the ID that you specified.

HTTP Status Code: 404

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: