Route 53

A comment for the hosted zone. Defaults to `Managed by Terraform`

Whether to create Route53 zone

Whether to create a KMS key for DNSSEC signing

Determines whether to create the Route53 zone or lookup an existing zone

The ID of the reusable delegation set whose NS records you want to assign to the hosted zone. Conflicts with vpc as delegation sets can only be used for public zones

Name of the Route 53 key signing key (KSK). When null, the hosted zone name is used. Set this to match an existing KSK when importing or adopting DNSSEC without recreating the key

A list of aliases to create. Note - due to the use of `toset()`, values must be static strings and not computed values

The ARN of the KMS key to use for DNSSEC signing. Required when `create_dnssec_kms_key` is `false`

The description of the key as viewed in AWS console

Additional tags to apply to the KMS key created for DNSSEC signing

Whether to enable Route 53 Accelerated Recovery for the public hosted zone. When enabled, provides a 60-minute RTO for resuming DNS record management if the US East (N. Virginia) Region becomes unavailable. Only applies to public hosted zones

Whether to enable DNSSEC for the Route53 zone

Whether to destroy all records (possibly managed outside of Terraform) in the zone when destroying the zone

Determines whether to ignore VPC association changes after creation to avoid disruptive diffs when using `aws_route53_zone_association` resource(s). Changing is a destructive action; users should be prepared to use Terraform state move commands/blocks when changing this value

This is the name of the hosted zone

Whether the hosted zone is private. Only applicable when `create_zone = false`

A map of Route53 records to create in the zone. The key can be used as the subdomain name, or `name` can be used to specify the full name

Tags added to all zones. Will take precedence over tags from the 'zones' variable

Timeouts for the Route53 zone operations

Configuration block(s) specifying VPC(s) to associate with a private hosted zone. Conflicts with the delegation_set_id argument in this resource and any aws_route53_zone_association resource specifying the same zone ID

A map of VPC association authorizations to create for the Route53 zone

The ID of the VPC associated with the existing hosted zone. Only applicable when `create_zone = false`

Zone ARN of Route53 zone

The Amazon Resource Name (ARN) of the key

The globally unique identifier for the key

The IAM resource policy set on the key

The region for the key

A cryptographic digest of a DNSKEY resource record (RR). DNSKEY records are used to publish the public key that resolvers can use to verify DNSSEC signatures that are used to secure certain kinds of information provided by the DNS system

A string that represents a DNSKEY record

A string that represents a delegation signer (DS) record

Route 53 Hosted Zone identifier and KMS Key identifier, separated by a comma (`,`)

The public key, represented as a Base64 encoding, as required by RFC-4034 Page 5

An integer used to identify the DNSSEC record for the domain name. The process used to calculate the value is described in RFC-4034 Appendix B

Zone ID of Route53 zone

Name of Route53 zone

Name servers of Route53 zone

The Route 53 name server that created the SOA record.

Records created in the Route53 zone