:doc:`Route53Domains <../../route53domains>` / Client / associate_delegation_signer_to_domain

*************************************
associate_delegation_signer_to_domain
*************************************



.. py:method:: Route53Domains.Client.associate_delegation_signer_to_domain(**kwargs)

  

  Creates a delegation signer (DS) record in the registry zone for this domain name.

   

  Note that creating DS record at the registry impacts DNSSEC validation of your DNS records. This action may render your domain name unavailable on the internet if the steps are completed in the wrong order, or with incorrect timing. For more information about DNSSEC signing, see `Configuring DNSSEC signing <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec.html>`__ in the *Route 53 developer guide*.

  

  See also: `AWS API Documentation <https://docs.aws.amazon.com/goto/WebAPI/route53domains-2014-05-15/AssociateDelegationSignerToDomain>`_  


  **Request Syntax**
  ::

    response = client.associate_delegation_signer_to_domain(
        DomainName='string',
        SigningAttributes={
            'Algorithm': 123,
            'Flags': 123,
            'PublicKey': 'string'
        }
    )
    
  :type DomainName: string
  :param DomainName: **[REQUIRED]** 

    The name of the domain.

    

  
  :type SigningAttributes: dict
  :param SigningAttributes: **[REQUIRED]** 

    The information about a key, including the algorithm, public key-value, and flags.

    

  
    - **Algorithm** *(integer) --* 

      Algorithm which was used to generate the digest from the public key.

      

    
    - **Flags** *(integer) --* 

      Defines the type of key. It can be either a KSK (key-signing-key, value 257) or ZSK (zone-signing-key, value 256). Using KSK is always encouraged. Only use ZSK if your DNS provider isn't Route 53 and you don’t have KSK available.

       

      If you have KSK and ZSK keys, always use KSK to create a delegations signer (DS) record. If you have ZSK keys only – use ZSK to create a DS record.

      

    
    - **PublicKey** *(string) --* 

      The base64-encoded public key part of the key pair that is passed to the registry.

      

    
  
  
  :rtype: dict
  :returns: 
    
    **Response Syntax**

    
    ::

      {
          'OperationId': 'string'
      }
      
    **Response Structure**

    

    - *(dict) --* 
      

      - **OperationId** *(string) --* 

        The identifier for tracking the progress of the request. To query the operation status, use `GetOperationDetail <https://docs.aws.amazon.com/Route53/latest/APIReference/API_domains_GetOperationDetail.html>`__.

        
  
  **Exceptions**
  
  *   :py:class:`Route53Domains.Client.exceptions.DuplicateRequest`

  
  *   :py:class:`Route53Domains.Client.exceptions.InvalidInput`

  
  *   :py:class:`Route53Domains.Client.exceptions.OperationLimitExceeded`

  
  *   :py:class:`Route53Domains.Client.exceptions.TLDRulesViolation`

  
  *   :py:class:`Route53Domains.Client.exceptions.UnsupportedTLD`

  
  *   :py:class:`Route53Domains.Client.exceptions.DnssecLimitExceeded`

  