Struct rusoto_route53::CreateKeySigningKeyRequest

pub struct CreateKeySigningKeyRequest {
    pub caller_reference: String,
    pub hosted_zone_id: String,
    pub key_management_service_arn: String,
    pub name: String,
    pub status: String,
}

Fields

caller_reference: String

A unique string that identifies the request.

hosted_zone_id: String

The unique string (ID) used to identify a hosted zone.

key_management_service_arn: String

The Amazon resource name (ARN) for a customer managed customer master key (CMK) in AWS Key Management Service (AWS KMS). The KeyManagementServiceArn must be unique for each key-signing key (KSK) in a single hosted zone. To see an example of KeyManagementServiceArn that grants the correct permissions for DNSSEC, scroll down to Example.

You must configure the customer managed CMK as follows:

Status

Enabled

Key spec

ECC_NIST_P256

Key usage

Sign and verify

Key policy

The key policy must give permission for the following actions:

• DescribeKey

• GetPublicKey

• Sign

The key policy must also include the Amazon Route 53 service in the principal for your account. Specify the following:

• "Service": "dnssec.route53.aws.amazonaws.com"

For more information about working with a customer managed CMK in AWS KMS, see AWS Key Management Service concepts.

name: String

A string used to identify a key-signing key (KSK). Name can include numbers, letters, and underscores (_). Name must be unique for each key-signing key in the same hosted zone.

status: String

A string specifying the initial status of the key-signing key (KSK). You can set the value to ACTIVE or INACTIVE.

Trait Implementations

impl Clone for CreateKeySigningKeyRequest

fn clone(&self) -> CreateKeySigningKeyRequest

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateKeySigningKeyRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CreateKeySigningKeyRequest

fn default() -> CreateKeySigningKeyRequest

Returns the “default value” for a type.

impl PartialEq<CreateKeySigningKeyRequest> for CreateKeySigningKeyRequest

fn eq(&self, other: &CreateKeySigningKeyRequest) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &CreateKeySigningKeyRequest) -> bool

This method tests for !=.

impl StructuralPartialEq for CreateKeySigningKeyRequest