Skip to content

DNSSEC

The DNSSEC resource allows you to manage AWS Route53 DNSSEC configurations, enabling you to secure your domain name system against certain types of attacks.

Minimal Example

Create a basic DNSSEC configuration for a hosted zone.

ts
import AWS from "alchemy/aws/control";

const dnssec = await AWS.Route53.DNSSEC("myDNSSEC", {
  HostedZoneId: "Z3M3LM4B2R8A5F", // Replace with your actual Hosted Zone ID
  adopt: true // Adopt existing DNSSEC configuration if it exists
});

Advanced Configuration

Enhance your DNSSEC setup with additional properties if required.

ts
const advancedDNSSEC = await AWS.Route53.DNSSEC("advancedDNSSEC", {
  HostedZoneId: "Z3M3LM4B2R8A5F", // Replace with your actual Hosted Zone ID
  adopt: false // Do not adopt existing DNSSEC configuration
});

Example with Resource Output

You can also capture output properties from the DNSSEC resource, such as the ARN and creation timestamps.

ts
const dnssecWithOutputs = await AWS.Route53.DNSSEC("dnssecWithOutputs", {
  HostedZoneId: "Z3M3LM4B2R8A5F", // Replace with your actual Hosted Zone ID
  adopt: true
});

// Accessing the ARN and timestamps
console.log(`DNSSEC ARN: ${dnssecWithOutputs.Arn}`);
console.log(`Creation Time: ${dnssecWithOutputs.CreationTime}`);
console.log(`Last Update Time: ${dnssecWithOutputs.LastUpdateTime}`);