com.pulumi.aws.route53.HostedZoneDnsSec Maven / Gradle / Ivy
Go to download
Show more of this group Show more artifacts with this name
Show all versions of aws Show documentation
Show all versions of aws Show documentation
A Pulumi package for creating and managing Amazon Web Services (AWS) cloud resources.
// *** WARNING: this file was generated by pulumi-java-gen. ***
// *** Do not edit by hand unless you're certain you know what you are doing! ***
package com.pulumi.aws.route53;
import com.pulumi.aws.Utilities;
import com.pulumi.aws.route53.HostedZoneDnsSecArgs;
import com.pulumi.aws.route53.inputs.HostedZoneDnsSecState;
import com.pulumi.core.Output;
import com.pulumi.core.annotations.Export;
import com.pulumi.core.annotations.ResourceType;
import com.pulumi.core.internal.Codegen;
import java.lang.String;
import java.util.Optional;
import javax.annotation.Nullable;
/**
* Manages Route 53 Hosted Zone Domain Name System Security Extensions (DNSSEC). For more information about managing DNSSEC in Route 53, see the [Route 53 Developer Guide](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec.html).
*
* !> **WARNING:** If you disable DNSSEC signing for your hosted zone before the DNS changes have propagated, your domain could become unavailable on the internet. When you remove the DS records, you must wait until the longest TTL for the DS records that you remove has expired before you complete the step to disable DNSSEC signing. Please refer to the [Route 53 Developer Guide - Disable DNSSEC](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-disable.html) for a detailed breakdown on the steps required to disable DNSSEC safely for a hosted zone.
*
* > **Note:** Route53 hosted zones are global resources, and as such any `aws.kms.Key` that you use as part of a signing key needs to be located in the `us-east-1` region. In the example below, the main AWS provider declaration is for `us-east-1`, however if you are provisioning your AWS resources in a different region, you will need to specify a provider alias and use that attached to the `aws.kms.Key` resource as described in the provider alias documentation.
*
* ## Example Usage
*
* <!--Start PulumiCodeChooser -->
*
* {@code
* package generated_program;
*
* import com.pulumi.Context;
* import com.pulumi.Pulumi;
* import com.pulumi.core.Output;
* import com.pulumi.aws.AwsFunctions;
* import com.pulumi.aws.inputs.GetCallerIdentityArgs;
* import com.pulumi.aws.kms.Key;
* import com.pulumi.aws.kms.KeyArgs;
* import com.pulumi.aws.route53.Zone;
* import com.pulumi.aws.route53.ZoneArgs;
* import com.pulumi.aws.route53.KeySigningKey;
* import com.pulumi.aws.route53.KeySigningKeyArgs;
* import com.pulumi.aws.route53.HostedZoneDnsSec;
* import com.pulumi.aws.route53.HostedZoneDnsSecArgs;
* import static com.pulumi.codegen.internal.Serialization.*;
* import com.pulumi.resources.CustomResourceOptions;
* import java.util.List;
* import java.util.ArrayList;
* import java.util.Map;
* import java.io.File;
* import java.nio.file.Files;
* import java.nio.file.Paths;
*
* public class App {
* public static void main(String[] args) {
* Pulumi.run(App::stack);
* }
*
* public static void stack(Context ctx) {
* final var current = AwsFunctions.getCallerIdentity();
*
* var example = new Key("example", KeyArgs.builder()
* .customerMasterKeySpec("ECC_NIST_P256")
* .deletionWindowInDays(7)
* .keyUsage("SIGN_VERIFY")
* .policy(serializeJson(
* jsonObject(
* jsonProperty("Statement", jsonArray(
* jsonObject(
* jsonProperty("Action", jsonArray(
* "kms:DescribeKey",
* "kms:GetPublicKey",
* "kms:Sign",
* "kms:Verify"
* )),
* jsonProperty("Effect", "Allow"),
* jsonProperty("Principal", jsonObject(
* jsonProperty("Service", "dnssec-route53.amazonaws.com")
* )),
* jsonProperty("Resource", "*"),
* jsonProperty("Sid", "Allow Route 53 DNSSEC Service")
* ),
* jsonObject(
* jsonProperty("Action", "kms:*"),
* jsonProperty("Effect", "Allow"),
* jsonProperty("Principal", jsonObject(
* jsonProperty("AWS", String.format("arn:aws:iam::%s:root", current.applyValue(getCallerIdentityResult -> getCallerIdentityResult.accountId())))
* )),
* jsonProperty("Resource", "*"),
* jsonProperty("Sid", "Enable IAM User Permissions")
* )
* )),
* jsonProperty("Version", "2012-10-17")
* )))
* .build());
*
* var exampleZone = new Zone("exampleZone", ZoneArgs.builder()
* .name("example.com")
* .build());
*
* var exampleKeySigningKey = new KeySigningKey("exampleKeySigningKey", KeySigningKeyArgs.builder()
* .hostedZoneId(exampleZone.id())
* .keyManagementServiceArn(example.arn())
* .name("example")
* .build());
*
* var exampleHostedZoneDnsSec = new HostedZoneDnsSec("exampleHostedZoneDnsSec", HostedZoneDnsSecArgs.builder()
* .hostedZoneId(exampleKeySigningKey.hostedZoneId())
* .build(), CustomResourceOptions.builder()
* .dependsOn(exampleKeySigningKey)
* .build());
*
* }
* }
* }
*
* <!--End PulumiCodeChooser -->
*
* ## Import
*
* Using `pulumi import`, import `aws_route53_hosted_zone_dnssec` resources using the Route 53 Hosted Zone identifier. For example:
*
* ```sh
* $ pulumi import aws:route53/hostedZoneDnsSec:HostedZoneDnsSec example Z1D633PJN98FT9
* ```
*
*/
@ResourceType(type="aws:route53/hostedZoneDnsSec:HostedZoneDnsSec")
public class HostedZoneDnsSec extends com.pulumi.resources.CustomResource {
/**
* Identifier of the Route 53 Hosted Zone.
*
* The following arguments are optional:
*
*/
@Export(name="hostedZoneId", refs={String.class}, tree="[0]")
private Output hostedZoneId;
/**
* @return Identifier of the Route 53 Hosted Zone.
*
* The following arguments are optional:
*
*/
public Output hostedZoneId() {
return this.hostedZoneId;
}
/**
* Hosted Zone signing status. Valid values: `SIGNING`, `NOT_SIGNING`. Defaults to `SIGNING`.
*
*/
@Export(name="signingStatus", refs={String.class}, tree="[0]")
private Output signingStatus;
/**
* @return Hosted Zone signing status. Valid values: `SIGNING`, `NOT_SIGNING`. Defaults to `SIGNING`.
*
*/
public Output> signingStatus() {
return Codegen.optional(this.signingStatus);
}
/**
*
* @param name The _unique_ name of the resulting resource.
*/
public HostedZoneDnsSec(java.lang.String name) {
this(name, HostedZoneDnsSecArgs.Empty);
}
/**
*
* @param name The _unique_ name of the resulting resource.
* @param args The arguments to use to populate this resource's properties.
*/
public HostedZoneDnsSec(java.lang.String name, HostedZoneDnsSecArgs args) {
this(name, args, null);
}
/**
*
* @param name The _unique_ name of the resulting resource.
* @param args The arguments to use to populate this resource's properties.
* @param options A bag of options that control this resource's behavior.
*/
public HostedZoneDnsSec(java.lang.String name, HostedZoneDnsSecArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options) {
super("aws:route53/hostedZoneDnsSec:HostedZoneDnsSec", name, makeArgs(args, options), makeResourceOptions(options, Codegen.empty()), false);
}
private HostedZoneDnsSec(java.lang.String name, Output id, @Nullable HostedZoneDnsSecState state, @Nullable com.pulumi.resources.CustomResourceOptions options) {
super("aws:route53/hostedZoneDnsSec:HostedZoneDnsSec", name, state, makeResourceOptions(options, id), false);
}
private static HostedZoneDnsSecArgs makeArgs(HostedZoneDnsSecArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options) {
if (options != null && options.getUrn().isPresent()) {
return null;
}
return args == null ? HostedZoneDnsSecArgs.Empty : args;
}
private static com.pulumi.resources.CustomResourceOptions makeResourceOptions(@Nullable com.pulumi.resources.CustomResourceOptions options, @Nullable Output id) {
var defaultOptions = com.pulumi.resources.CustomResourceOptions.builder()
.version(Utilities.getVersion())
.build();
return com.pulumi.resources.CustomResourceOptions.merge(defaultOptions, options, id);
}
/**
* Get an existing Host resource's state with the given name, ID, and optional extra
* properties used to qualify the lookup.
*
* @param name The _unique_ name of the resulting resource.
* @param id The _unique_ provider ID of the resource to lookup.
* @param state
* @param options Optional settings to control the behavior of the CustomResource.
*/
public static HostedZoneDnsSec get(java.lang.String name, Output id, @Nullable HostedZoneDnsSecState state, @Nullable com.pulumi.resources.CustomResourceOptions options) {
return new HostedZoneDnsSec(name, id, state, options);
}
}
© 2015 - 2025 Weber Informatics LLC | Privacy Policy