Unable delete Route53 hostedzones

0

I can't delete hostedzones, it prompts: HostedZoneNotEmpty 400: The specified hosted zone contains DNSSEC Key Signing Keys and so cannot be deleted., but I already deleted it in the KMS console.

1개 답변
0

I haven't used DNSSEC myself yet but I'm assuming the usual restrictions on KMS key deletion apply. You can't delete KMS keys immediately, only schedule them for deletion with a min 7 days, default 30 days waiting period.

This is to protect you - deleting a customer master key is destructive and potentially dangerous. It deletes the key material and all metadata associated with the CMK, and is irreversible. After a CMK is deleted you can no longer decrypt the data that was encrypted under that CMK, which means that data becomes unrecoverable.

전문가
답변함 2년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠