Add DNSSEC monitoring to CDK stacks

DerploidEntertainment / Website

Infrastructure as Code and GitHub Pages sources for the Derploid website

https://www.derploid.com/

MIT License

2 stars 0 forks source link

Add DNSSEC monitoring to CDK stacks #17

Closed Rabadash8820 closed 2 years ago

Rabadash8820 commented 2 years ago

See Monitoring hosted zones using Amazon CloudWatch for details.

Rabadash8820 commented 2 years ago

Update: I have verified that when I disable the KMS CMK that backs one of our domains' DNSSEC KSKs, the corresponding DNSSECKeySigningKeysNeedingAction alarm for that domain is then triggered within the next 24 hours.