Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

GetDNSSEC

Focus mode
GetDNSSEC - Amazon Route 53

Returns information about DNSSEC for a specific hosted zone, including the key-signing keys (KSKs) in the hosted zone.

Request Syntax

GET /2013-04-01/hostedzone/Id/dnssec HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.

Id

A unique string used to identify a hosted zone.

Length Constraints: Maximum length of 32.

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 <?xml version="1.0" encoding="UTF-8"?> <GetDNSSECResponse> <KeySigningKeys> <KeySigningKey> <CreatedDate>timestamp</CreatedDate> <DigestAlgorithmMnemonic>string</DigestAlgorithmMnemonic> <DigestAlgorithmType>integer</DigestAlgorithmType> <DigestValue>string</DigestValue> <DNSKEYRecord>string</DNSKEYRecord> <DSRecord>string</DSRecord> <Flag>integer</Flag> <KeyTag>integer</KeyTag> <KmsArn>string</KmsArn> <LastModifiedDate>timestamp</LastModifiedDate> <Name>string</Name> <PublicKey>string</PublicKey> <SigningAlgorithmMnemonic>string</SigningAlgorithmMnemonic> <SigningAlgorithmType>integer</SigningAlgorithmType> <Status>string</Status> <StatusMessage>string</StatusMessage> </KeySigningKey> </KeySigningKeys> <Status> <ServeSignature>string</ServeSignature> <StatusMessage>string</StatusMessage> </Status> </GetDNSSECResponse>

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in XML format by the service.

GetDNSSECResponse

Root level tag for the GetDNSSECResponse parameters.

Required: Yes

KeySigningKeys

The key-signing keys (KSKs) in your account.

Type: Array of KeySigningKey objects

Status

A string representing the status of DNSSEC.

Type: DNSSECStatus object

Errors

For information about the errors that are common to all actions, see Common Errors.

InvalidArgument

Parameter name is not valid.

HTTP Status Code: 400

InvalidInput

The input is not valid.

HTTP Status Code: 400

NoSuchHostedZone

No hosted zone exists with the ID that you specified.

HTTP Status Code: 404

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.