Route53 / Client / deactivate_key_signing_key

deactivate_key_signing_key#

Route53.Client.deactivate_key_signing_key(**kwargs)#

Deactivates a key-signing key (KSK) so that it will not be used for signing by DNSSEC. This operation changes the KSK status to INACTIVE.

Request Syntax

response = client.deactivate_key_signing_key(
    HostedZoneId='string',
    Name='string'
)

Parameters:

HostedZoneId (string) –
[REQUIRED]

A unique string used to identify a hosted zone.
Name (string) –
[REQUIRED]

A string used to identify a key-signing key (KSK).

Return type:

dict

Returns:

Response Syntax

{
    'ChangeInfo': {
        'Id': 'string',
        'Status': 'PENDING'|'INSYNC',
        'SubmittedAt': datetime(2015, 1, 1),
        'Comment': 'string'
    }
}

Response Structure

(dict) –
- ChangeInfo (dict) –
  
  A complex type that describes change information about changes made to your hosted zone.
  - Id (string) –
    
    This element contains an ID that you use when performing a GetChange action to get detailed information about the change.
  - Status (string) –
    
    The current state of the request. PENDING indicates that this request has not yet been applied to all Amazon Route 53 DNS servers.
  - SubmittedAt (datetime) –
    
    The date and time that the change request was submitted in ISO 8601 format and Coordinated Universal Time (UTC). For example, the value 2017-03-27T17:48:16.751Z represents March 27, 2017 at 17:48:16.751 UTC.
  - Comment (string) –
    
    A comment you can provide.

Exceptions

Route53.Client.exceptions.ConcurrentModification
Route53.Client.exceptions.NoSuchKeySigningKey
Route53.Client.exceptions.InvalidKeySigningKeyStatus
Route53.Client.exceptions.InvalidSigningStatus
Route53.Client.exceptions.KeySigningKeyInUse
Route53.Client.exceptions.KeySigningKeyInParentDSRecord
Route53.Client.exceptions.InvalidInput