How can I purchase a domain and configure DNSSEC in AWS GovCloud?
Hi all
Looking at https://repost.aws/questions/QU4SCCdJjaTBC_LaifuKccSA/how-can-i-register-a-route-53-domain-for-govcloud, I'll need to buy a domain in the standard account, then "configure DNS settings as needed to work with your GovCloud resources." What does this mean?
- Does it mean I need to create a public hosted zone in the govcloud with the same name as the hosted zone created in the standard account? Can anybody elaborate the process step by step? Is there any blog post on this?
- How can I configure DNSSEC in AWS GovCloud? Can anybody elaborate the process step by step? Is there any blog post on this?
For #2, while I'm trying to establish a chain of trust, I noticed there is no "Registered domains" menu in the left pane in the GovCloud as follows, I can't add DNSSEC key. Does this mean I need to set up DNSSEC in the commercial account?
Thanks.
- Language
- English
asked a year ago218 views
- Newest
- Most votes
- Most comments
For Question 1: Yes, you need to create a public hosted zone in AWS GovCloud with the same Domain name as the one in your standard account. However, only one AWS account can have an authoritative public hosted zone for a domain, meaning you may need to configure DNS delegation if you want multiple accounts to manage subdomains.
For Question 2: Refer this: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-enable-signing.html
I found a blog post that answers my question: https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-amazon-route-53-authoritative-dns-service-for-public-hosted-zones-in-aws-govcloud-us-regions/
Relevant content
asked a year ago
asked a year ago
asked 3 years ago
@Kidd Ip, @Jordan Sandri, as I added the screenshot in the question, I don't see "Registered domains" menu in the left pane, I can't add DNSSEC key. Does it mean I'll need to enable DNSSEC in the commercial account?