Unable delete Route53 hostedzones

0

I can't delete hostedzones, it prompts: HostedZoneNotEmpty 400: The specified hosted zone contains DNSSEC Key Signing Keys and so cannot be deleted., but I already deleted it in the KMS console.

1 Antwort
0

I haven't used DNSSEC myself yet but I'm assuming the usual restrictions on KMS key deletion apply. You can't delete KMS keys immediately, only schedule them for deletion with a min 7 days, default 30 days waiting period.

This is to protect you - deleting a customer master key is destructive and potentially dangerous. It deletes the key material and all metadata associated with the CMK, and is irreversible. After a CMK is deleted you can no longer decrypt the data that was encrypted under that CMK, which means that data becomes unrecoverable.

EXPERTE
beantwortet vor 2 Jahren

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen