# DNSSEC Notes

For a new domain, you need to do some manual steps after running this state:

1. Log into the AWS Console
1. Go to route53->registered domains
1. Select the rgistered domain you've added.
1. Under the section "DNSSEC Status", click "Manage keys"
1. Add the key type, algorithm, and public key from `terragrunt output`.

You may also delete any previous keys that were there.

# Rotation

See xdr-terraform-modules/base/dns/public_dns/README.md for more information.