Skip to content

/AWS1/CL_R53=>DELETEKEYSIGNINGKEY()

About DeleteKeySigningKey

Deletes a key-signing key (KSK). Before you can delete a KSK, you must deactivate it. The KSK must be deactivated before you can delete it regardless of whether the hosted zone is enabled for DNSSEC signing.

You can use DeactivateKeySigningKey to deactivate the key before you delete it.

Use GetDNSSEC to verify that the KSK is in an INACTIVE status.

Method Signature

IMPORTING

Required arguments:

IV_HOSTEDZONEID TYPE /AWS1/R53RESOURCEID /AWS1/R53RESOURCEID

A unique string used to identify a hosted zone.

IV_NAME TYPE /AWS1/R53SIGNINGKEYNAME /AWS1/R53SIGNINGKEYNAME

A string used to identify a key-signing key (KSK).

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_R53DELKEYSIGNINGKEY01 /AWS1/CL_R53DELKEYSIGNINGKEY01