Set by controls 1

Active controls fix these values.

• vpcmap({...}), set to null Configuration block(s) specifying VPC(s) to associate with a private hosted zone. Conflicts with the delegation_set_id argument in this resource and any aws_route53_zone_association resource specifying the same zone ID

Optional 21

• commentstring, default nullA comment for the hosted zone. Defaults to Managed by Terraform
• createbool, default trueWhether to create Route53 zone
• create_dnssec_kms_keybool, default trueWhether to create a KMS key for DNSSEC signing
• create_zonebool, default trueDetermines whether to create the Route53 zone or lookup an existing zone
• delegation_set_idstring, default nullThe ID of the reusable delegation set whose NS records you want to assign to the hosted zone. Conflicts with vpc as delegation sets can only be used for public zones
• dnssec_key_signing_key_namestring, default nullName of the Route 53 key signing key (KSK). When null, the hosted zone name is used. Set this to match an existing KSK when importing or adopting DNSSEC without recreating the key
• dnssec_kms_key_aliaseslist(string), default []A list of aliases to create. Note - due to the use of toset(), values must be static strings and not computed values
• dnssec_kms_key_arnstring, default nullThe ARN of the KMS key to use for DNSSEC signing. Required when create_dnssec_kms_key is false
• dnssec_kms_key_descriptionstring, default "Route53 DNSSEC KMS Key"The description of the key as viewed in AWS console
• dnssec_kms_key_tagsmap(string), default {}Additional tags to apply to the KMS key created for DNSSEC signing
• enable_accelerated_recoverybool, default nullWhether to enable Route 53 Accelerated Recovery for the public hosted zone. When enabled, provides a 60-minute RTO for resuming DNS record management if the US East (N. Virginia) Region becomes unavailable. Only applies to public hosted zones
• enable_dnssecbool, default falseWhether to enable DNSSEC for the Route53 zone
• force_destroybool, default nullWhether to destroy all records (possibly managed outside of Terraform) in the zone when destroying the zone
• ignore_vpcbool, default falseDetermines whether to ignore VPC association changes after creation to avoid disruptive diffs when using aws_route53_zone_association resource(s). Changing is a destructive action; users should be prepared to use Terraform state move commands/blocks when changing this value
• namestring, default ""This is the name of the hosted zone
• private_zonebool, default falseWhether the hosted zone is private. Only applicable when create_zone = false
• recordsmap({...}), default {}A map of Route53 records to create in the zone. The key can be used as the subdomain name, or name can be used to specify the full name
• tagsmap(string), default {}Tags added to all zones. Will take precedence over tags from the 'zones' variable
• timeoutsobject({...}), default nullTimeouts for the Route53 zone operations
• vpc_association_authorizationsmap({...}), default nullA map of VPC association authorizations to create for the Route53 zone
• vpc_idstring, default nullThe ID of the VPC associated with the existing hosted zone. Only applicable when create_zone = false