DNSSEC Notes

For a new domain, you need to do some manual steps after running this state:

Log into the AWS Console
Go to route53->registered domains
Select the rgistered domain you've added.
Under the section "DNSSEC Status", click "Manage keys"
Add the key type, algorithm, and public key from terragrunt output.

You may also delete any previous keys that were there.

Rotation

See xdr-terraform-modules/base/dns/public_dns/README.md for more information.