cant delete hosted zone

Question

I am working on a static website and made a mistake with dnssec signing in route53.
At one point I could access my website from the internet. 
But tried to secure the connection to eliminate warning message that site may be insecure.
The hosted zone is broken but I can't delete no matter what I try.
Now even the unsecure static page will not show.

**Errors below**

Error occurred
Before you can delete a hosted zone, you must first delete all resource record sets except the NS and SOA resource record sets for the zone apex.
(HostedZoneNotEmpty 400: The specified hosted zone contains DNSSEC Key Signing Keys and so cannot be deleted.)

Hmmm… can't reach this pageCheck if there is a typo in  www.xxx.com.
Search the web for XXXXX
If spelling is correct, try running Windows Network Diagnostics.
DNS_PROBE_FINISHED_NXDOMAIN

Answer

If you have DS record then reduce the TTL time 0. If you do not have any DS record then go "Customer manaed CMK details" page click the link to Manage key. Select schedule key actions under the "Key actions" drop down menu. Minimun days 7, after the 7-day you can delete this key.
If you have DS record, please follow the instructions under the "Disable DNSSEC signing". Please remember Key-signing keys (KSKs) has:

1. Switch to advanced view

2. Switch to default view

Under your registered domain (Domain Registration) "DNSSEC status", click the "Manage keys" and delete or remove any key you have.

(Dashboard > Domain > xxx.com > DNSSEC > Manage keys)

I hope this will help you.

cant delete hosted zone

관련 콘텐츠