CmdID / aws / aws route53
aws route53 create-key-signing-key
Creates a new key-signing key (KSK) associated with a hosted zone. AWS CLI reference
5 options Its page in the AWS CLI reference
Options
--caller-referenceA unique string that identifies the request.--hosted-zone-idThe unique string (ID) used to identify a hosted zone.--key-management-service-arnThe Amazon resource name (ARN) for a customer managed key in Key Management Service (KMS).--nameA string used to identify a key-signing key (KSK).--statusA string specifying the initial status of the key-signing key (KSK).