Testing DNSSEC Cloudwatch Alarms

Question

Hi Team,
Is there a manual process available to generate alarms for the following CloudWatch metrics?

DNSSECKeySigningKeysNeedingAction
DNSSECKeySigningKeyMaxNeedingActionAge
DNSSECInternalFailure
Looking forward to your guidance on this.

rePost-User-4097155 · Answer

You need to have a hosted zone in the R53 service. AWS/Route53 namespace includes the metric for Route 53 hosted zones [1].

Once you have the hosted zones, you can create an alarm using the steps in the link [2].

DNSSECInternalFailure
DNSSECKeySigningKeysNeedingAction
DNSSECKeySigningKeyMaxNeedingActionAge

You can refer to the links -->

[1] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/monitoring-hosted-zones-with-cloudwatch.html#cloudwatch-dimensions-route-53-hosted-zones

[2] https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ConsoleAlarms.html

Testing DNSSEC Cloudwatch Alarms

添加回答

相关内容