diff --git a/environments/prod/outputs.tf b/environments/prod/outputs.tf index e69de29..bdb8069 100644 --- a/environments/prod/outputs.tf +++ b/environments/prod/outputs.tf @@ -0,0 +1,4 @@ +output "route53_dnssec_keys" { + value = module.route53.dnssec_key_signing_keys + description = "DNSSEC key signing key details for Route53 zones" +} diff --git a/modules/route53/output.tf b/modules/route53/output.tf index f55190b..2236064 100644 --- a/modules/route53/output.tf +++ b/modules/route53/output.tf @@ -1,3 +1,18 @@ output "ds_records" { value = { for k, v in aws_route53_key_signing_key.key_signing_key : k => v.ds_record } } + +output "dnssec_key_signing_keys" { + value = { + for k, v in aws_route53_key_signing_key.key_signing_key : k => { + key_tag = v.key_tag + digest_algorithm_mnemonic = v.digest_algorithm_mnemonic + digest_algorithm_type = v.digest_algorithm_type + digest_value = v.digest_value + public_key = v.public_key + signing_algorithm_mnemonic = v.signing_algorithm_mnemonic + signing_algorithm_type = v.signing_algorithm_type + } + } + description = "DNSSEC key signing key details for each domain" +}