Unable to establish DNSSEC chain of trust for .com domain hosted in Route 53

0

When setting up DNSSEC for our example.com domain in the Route 53 console, I am able to complete the first part successfully. Now I need to establish the chain of trust. AWS help tells me to add a DS record. However, DS is not an option in the "type of record dropdown" when using Quick Create.

Using the wizard produces this error message: InvalidChangeBatch 400: RRSet of type DS with DNS name example.com. is not permitted in zone example.com.

Does AWS automatically add the DS records for the .com zone?

kamuzz
demandé il y a un an334 vues
1 réponse
0

The following documents appear to support DNSSEC settings themselves.
I was wondering if there is something wrong with the way it is set up?
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/domain-configure-dnssec.html

profile picture
EXPERT
répondu il y a un an

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions