Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Testing DNSSEC Cloudwatch Alarms

0

Hi Team, Is there a manual process available to generate alarms for the following CloudWatch metrics?

DNSSECKeySigningKeysNeedingAction DNSSECKeySigningKeyMaxNeedingActionAge DNSSECInternalFailure Looking forward to your guidance on this.

Topics
Application IntegrationManagement & Governance
Tags
Amazon CloudWatchAmazon Simple Notification Service (SNS)
Language
English

asked 2 years ago210 views

1 Answer
1

You need to have a hosted zone in the R53 service. AWS/Route53 namespace includes the metric for Route 53 hosted zones [1].

Once you have the hosted zones, you can create an alarm using the steps in the link [2].

DNSSECInternalFailure DNSSECKeySigningKeysNeedingAction DNSSECKeySigningKeyMaxNeedingActionAge

You can refer to the links -->

[1] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/monitoring-hosted-zones-with-cloudwatch.html#cloudwatch-dimensions-route-53-hosted-zones

[2] https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ConsoleAlarms.html

AWS

answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content