Oracle Cloud Infrastructure v2.33.0, May 1 25

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

oci.Dns.getZones

Explore with Pulumi AI

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testZones = oci.Dns.getZones({
    compartmentId: compartmentId,
    dnssecState: zoneDnssecState,
    name: zoneName,
    nameContains: zoneNameContains,
    scope: zoneScope,
    state: zoneState,
    timeCreatedGreaterThanOrEqualTo: zoneTimeCreatedGreaterThanOrEqualTo,
    timeCreatedLessThan: zoneTimeCreatedLessThan,
    tsigKeyId: testTsigKey.id,
    viewId: testView.id,
    zoneType: zoneZoneType,
});

import pulumi
import pulumi_oci as oci

test_zones = oci.Dns.get_zones(compartment_id=compartment_id,
    dnssec_state=zone_dnssec_state,
    name=zone_name,
    name_contains=zone_name_contains,
    scope=zone_scope,
    state=zone_state,
    time_created_greater_than_or_equal_to=zone_time_created_greater_than_or_equal_to,
    time_created_less_than=zone_time_created_less_than,
    tsig_key_id=test_tsig_key["id"],
    view_id=test_view["id"],
    zone_type=zone_zone_type)

package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v2/go/oci/dns"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := dns.GetZones(ctx, &dns.GetZonesArgs{
			CompartmentId:                   compartmentId,
			DnssecState:                     pulumi.StringRef(zoneDnssecState),
			Name:                            pulumi.StringRef(zoneName),
			NameContains:                    pulumi.StringRef(zoneNameContains),
			Scope:                           pulumi.StringRef(zoneScope),
			State:                           pulumi.StringRef(zoneState),
			TimeCreatedGreaterThanOrEqualTo: pulumi.StringRef(zoneTimeCreatedGreaterThanOrEqualTo),
			TimeCreatedLessThan:             pulumi.StringRef(zoneTimeCreatedLessThan),
			TsigKeyId:                       pulumi.StringRef(testTsigKey.Id),
			ViewId:                          pulumi.StringRef(testView.Id),
			ZoneType:                        pulumi.StringRef(zoneZoneType),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testZones = Oci.Dns.GetZones.Invoke(new()
    {
        CompartmentId = compartmentId,
        DnssecState = zoneDnssecState,
        Name = zoneName,
        NameContains = zoneNameContains,
        Scope = zoneScope,
        State = zoneState,
        TimeCreatedGreaterThanOrEqualTo = zoneTimeCreatedGreaterThanOrEqualTo,
        TimeCreatedLessThan = zoneTimeCreatedLessThan,
        TsigKeyId = testTsigKey.Id,
        ViewId = testView.Id,
        ZoneType = zoneZoneType,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.Dns.DnsFunctions;
import com.pulumi.oci.Dns.inputs.GetZonesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testZones = DnsFunctions.getZones(GetZonesArgs.builder()
            .compartmentId(compartmentId)
            .dnssecState(zoneDnssecState)
            .name(zoneName)
            .nameContains(zoneNameContains)
            .scope(zoneScope)
            .state(zoneState)
            .timeCreatedGreaterThanOrEqualTo(zoneTimeCreatedGreaterThanOrEqualTo)
            .timeCreatedLessThan(zoneTimeCreatedLessThan)
            .tsigKeyId(testTsigKey.id())
            .viewId(testView.id())
            .zoneType(zoneZoneType)
            .build());

    }
}

variables:
  testZones:
    fn::invoke:
      function: oci:Dns:getZones
      arguments:
        compartmentId: ${compartmentId}
        dnssecState: ${zoneDnssecState}
        name: ${zoneName}
        nameContains: ${zoneNameContains}
        scope: ${zoneScope}
        state: ${zoneState}
        timeCreatedGreaterThanOrEqualTo: ${zoneTimeCreatedGreaterThanOrEqualTo}
        timeCreatedLessThan: ${zoneTimeCreatedLessThan}
        tsigKeyId: ${testTsigKey.id}
        viewId: ${testView.id}
        zoneType: ${zoneZoneType}

Using getZones

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getZones(args: GetZonesArgs, opts?: InvokeOptions): Promise<GetZonesResult>
function getZonesOutput(args: GetZonesOutputArgs, opts?: InvokeOptions): Output<GetZonesResult>

def get_zones(compartment_id: Optional[str] = None,
              dnssec_state: Optional[str] = None,
              filters: Optional[Sequence[GetZonesFilter]] = None,
              name: Optional[str] = None,
              name_contains: Optional[str] = None,
              scope: Optional[str] = None,
              sort_by: Optional[str] = None,
              sort_order: Optional[str] = None,
              state: Optional[str] = None,
              time_created_greater_than_or_equal_to: Optional[str] = None,
              time_created_less_than: Optional[str] = None,
              tsig_key_id: Optional[str] = None,
              view_id: Optional[str] = None,
              zone_type: Optional[str] = None,
              opts: Optional[InvokeOptions] = None) -> GetZonesResult
def get_zones_output(compartment_id: Optional[pulumi.Input[str]] = None,
              dnssec_state: Optional[pulumi.Input[str]] = None,
              filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetZonesFilterArgs]]]] = None,
              name: Optional[pulumi.Input[str]] = None,
              name_contains: Optional[pulumi.Input[str]] = None,
              scope: Optional[pulumi.Input[str]] = None,
              sort_by: Optional[pulumi.Input[str]] = None,
              sort_order: Optional[pulumi.Input[str]] = None,
              state: Optional[pulumi.Input[str]] = None,
              time_created_greater_than_or_equal_to: Optional[pulumi.Input[str]] = None,
              time_created_less_than: Optional[pulumi.Input[str]] = None,
              tsig_key_id: Optional[pulumi.Input[str]] = None,
              view_id: Optional[pulumi.Input[str]] = None,
              zone_type: Optional[pulumi.Input[str]] = None,
              opts: Optional[InvokeOptions] = None) -> Output[GetZonesResult]

func GetZones(ctx *Context, args *GetZonesArgs, opts ...InvokeOption) (*GetZonesResult, error)
func GetZonesOutput(ctx *Context, args *GetZonesOutputArgs, opts ...InvokeOption) GetZonesResultOutput

> Note: This function is named GetZones in the Go SDK.

public static class GetZones 
{
    public static Task<GetZonesResult> InvokeAsync(GetZonesArgs args, InvokeOptions? opts = null)
    public static Output<GetZonesResult> Invoke(GetZonesInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetZonesResult> getZones(GetZonesArgs args, InvokeOptions options)
public static Output<GetZonesResult> getZones(GetZonesArgs args, InvokeOptions options)

fn::invoke:
  function: oci:Dns/getZones:getZones
  arguments:
    # arguments dictionary

The following arguments are supported:

CompartmentId string: The OCID of the compartment the resource belongs to.
DnssecState string: Search for zones that have the given DnssecState.
Filters List<GetZonesFilter>
Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
NameContains string: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
Scope string: Specifies to operate only on resources that have a matching DNS scope.
SortBy string: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
SortOrder string: The order to sort the resources. Allowed values are: ASC|DESC
State string: The state of a resource.
TimeCreatedGreaterThanOrEqualTo string: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
TimeCreatedLessThan string: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
TsigKeyId string: Search for zones that are associated with a TSIG key.
ViewId string: The OCID of the view the resource is associated with.
ZoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

CompartmentId string: The OCID of the compartment the resource belongs to.
DnssecState string: Search for zones that have the given DnssecState.
Filters []GetZonesFilter
Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
NameContains string: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
Scope string: Specifies to operate only on resources that have a matching DNS scope.
SortBy string: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
SortOrder string: The order to sort the resources. Allowed values are: ASC|DESC
State string: The state of a resource.
TimeCreatedGreaterThanOrEqualTo string: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
TimeCreatedLessThan string: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
TsigKeyId string: Search for zones that are associated with a TSIG key.
ViewId string: The OCID of the view the resource is associated with.
ZoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId String: The OCID of the compartment the resource belongs to.
dnssecState String: Search for zones that have the given DnssecState.
filters List<GetZonesFilter>
name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameContains String: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
scope String: Specifies to operate only on resources that have a matching DNS scope.
sortBy String: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
sortOrder String: The order to sort the resources. Allowed values are: ASC|DESC
state String: The state of a resource.
timeCreatedGreaterThanOrEqualTo String: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
timeCreatedLessThan String: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
tsigKeyId String: Search for zones that are associated with a TSIG key.
viewId String: The OCID of the view the resource is associated with.
zoneType String: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId string: The OCID of the compartment the resource belongs to.
dnssecState string: Search for zones that have the given DnssecState.
filters GetZonesFilter[]
name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameContains string: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
scope string: Specifies to operate only on resources that have a matching DNS scope.
sortBy string: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
sortOrder string: The order to sort the resources. Allowed values are: ASC|DESC
state string: The state of a resource.
timeCreatedGreaterThanOrEqualTo string: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
timeCreatedLessThan string: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
tsigKeyId string: Search for zones that are associated with a TSIG key.
viewId string: The OCID of the view the resource is associated with.
zoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartment_id str: The OCID of the compartment the resource belongs to.
dnssec_state str: Search for zones that have the given DnssecState.
filters Sequence[GetZonesFilter]
name str: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
name_contains str: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
scope str: Specifies to operate only on resources that have a matching DNS scope.
sort_by str: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
sort_order str: The order to sort the resources. Allowed values are: ASC|DESC
state str: The state of a resource.
time_created_greater_than_or_equal_to str: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
time_created_less_than str: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
tsig_key_id str: Search for zones that are associated with a TSIG key.
view_id str: The OCID of the view the resource is associated with.
zone_type str: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId String: The OCID of the compartment the resource belongs to.
dnssecState String: Search for zones that have the given DnssecState.
filters List<Property Map>
name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameContains String: Search by zone name. Will match any zone whose name (case-insensitive) contains the provided value.
scope String: Specifies to operate only on resources that have a matching DNS scope.
sortBy String: The field by which to sort zones. Allowed values are: name|zoneType|timeCreated
sortOrder String: The order to sort the resources. Allowed values are: ASC|DESC
state String: The state of a resource.
timeCreatedGreaterThanOrEqualTo String: An RFC 3339 timestamp that states all returned resources were created on or after the indicated time.
timeCreatedLessThan String: An RFC 3339 timestamp that states all returned resources were created before the indicated time.
tsigKeyId String: Search for zones that are associated with a TSIG key.
viewId String: The OCID of the view the resource is associated with.
zoneType String: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

getZones Result

The following output properties are available:

CompartmentId string: The OCID of the compartment containing the zone.
Id string: The provider-assigned unique ID for this managed resource.
Zones List<GetZonesZone>: The list of zones.
DnssecState string: The state of DNSSEC on the zone.
Filters List<GetZonesFilter>
Name string: The name of the zone.
NameContains string
Scope string: The scope of the zone.
SortBy string
SortOrder string
State string: The current state of the zone resource.
TimeCreatedGreaterThanOrEqualTo string
TimeCreatedLessThan string
TsigKeyId string: The OCID of the TSIG key.
ViewId string: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
ZoneType string: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

CompartmentId string: The OCID of the compartment containing the zone.
Id string: The provider-assigned unique ID for this managed resource.
Zones []GetZonesZone: The list of zones.
DnssecState string: The state of DNSSEC on the zone.
Filters []GetZonesFilter
Name string: The name of the zone.
NameContains string
Scope string: The scope of the zone.
SortBy string
SortOrder string
State string: The current state of the zone resource.
TimeCreatedGreaterThanOrEqualTo string
TimeCreatedLessThan string
TsigKeyId string: The OCID of the TSIG key.
ViewId string: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
ZoneType string: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

compartmentId String: The OCID of the compartment containing the zone.
id String: The provider-assigned unique ID for this managed resource.
zones List<GetZonesZone>: The list of zones.
dnssecState String: The state of DNSSEC on the zone.
filters List<GetZonesFilter>
name String: The name of the zone.
nameContains String
scope String: The scope of the zone.
sortBy String
sortOrder String
state String: The current state of the zone resource.
timeCreatedGreaterThanOrEqualTo String
timeCreatedLessThan String
tsigKeyId String: The OCID of the TSIG key.
viewId String: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
zoneType String: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

compartmentId string: The OCID of the compartment containing the zone.
id string: The provider-assigned unique ID for this managed resource.
zones GetZonesZone[]: The list of zones.
dnssecState string: The state of DNSSEC on the zone.
filters GetZonesFilter[]
name string: The name of the zone.
nameContains string
scope string: The scope of the zone.
sortBy string
sortOrder string
state string: The current state of the zone resource.
timeCreatedGreaterThanOrEqualTo string
timeCreatedLessThan string
tsigKeyId string: The OCID of the TSIG key.
viewId string: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
zoneType string: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

compartment_id str: The OCID of the compartment containing the zone.
id str: The provider-assigned unique ID for this managed resource.
zones Sequence[GetZonesZone]: The list of zones.
dnssec_state str: The state of DNSSEC on the zone.
filters Sequence[GetZonesFilter]
name str: The name of the zone.
name_contains str
scope str: The scope of the zone.
sort_by str
sort_order str
state str: The current state of the zone resource.
time_created_greater_than_or_equal_to str
time_created_less_than str
tsig_key_id str: The OCID of the TSIG key.
view_id str: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
zone_type str: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

compartmentId String: The OCID of the compartment containing the zone.
id String: The provider-assigned unique ID for this managed resource.
zones List<Property Map>: The list of zones.
dnssecState String: The state of DNSSEC on the zone.
filters List<Property Map>
name String: The name of the zone.
nameContains String
scope String: The scope of the zone.
sortBy String
sortOrder String
state String: The current state of the zone resource.
timeCreatedGreaterThanOrEqualTo String
timeCreatedLessThan String
tsigKeyId String: The OCID of the TSIG key.
viewId String: The OCID of the private view containing the zone. This value will be null for zones in the global DNS, which are publicly resolvable and not part of a private view.
zoneType String: The type of the zone. Must be either PRIMARY or SECONDARY. SECONDARY is only supported for GLOBAL zones.

Supporting Types

GetZonesFilter

Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
Values List<string>
Regex bool

Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
Values []string
Regex bool

name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
values List<String>
regex Boolean

name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
values string[]
regex boolean

name str: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
values Sequence[str]
regex bool

name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
values List<String>
regex Boolean

GetZonesZone

CompartmentId string: The OCID of the compartment the resource belongs to.
DefinedTags Dictionary<string, string>: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
DnssecConfigs List<GetZonesZoneDnssecConfig>: DNSSEC configuration data.
DnssecState string: Search for zones that have the given DnssecState.
ExternalDownstreams List<GetZonesZoneExternalDownstream>: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
ExternalMasters List<GetZonesZoneExternalMaster>: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
FreeformTags Dictionary<string, string>: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
Id string: The OCID of the zone.
IsProtected bool: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
Nameservers List<GetZonesZoneNameserver>: The authoritative nameservers for the zone.
Scope string: Specifies to operate only on resources that have a matching DNS scope.
Self string: The canonical absolute URL of the resource.
Serial int: The current serial of the zone. As seen in the zone's SOA record.
State string: The state of a resource.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
Version string: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
ViewId string: The OCID of the view the resource is associated with.
ZoneTransferServers List<GetZonesZoneZoneTransferServer>: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
ZoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

CompartmentId string: The OCID of the compartment the resource belongs to.
DefinedTags map[string]string: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
DnssecConfigs []GetZonesZoneDnssecConfig: DNSSEC configuration data.
DnssecState string: Search for zones that have the given DnssecState.
ExternalDownstreams []GetZonesZoneExternalDownstream: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
ExternalMasters []GetZonesZoneExternalMaster: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
FreeformTags map[string]string: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
Id string: The OCID of the zone.
IsProtected bool: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
Name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
Nameservers []GetZonesZoneNameserver: The authoritative nameservers for the zone.
Scope string: Specifies to operate only on resources that have a matching DNS scope.
Self string: The canonical absolute URL of the resource.
Serial int: The current serial of the zone. As seen in the zone's SOA record.
State string: The state of a resource.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
Version string: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
ViewId string: The OCID of the view the resource is associated with.
ZoneTransferServers []GetZonesZoneZoneTransferServer: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
ZoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId String: The OCID of the compartment the resource belongs to.
definedTags Map<String,String>: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
dnssecConfigs List<GetZonesZonesecConfig>: DNSSEC configuration data.
dnssecState String: Search for zones that have the given DnssecState.
externalDownstreams List<GetZonesZoneExternalDownstream>: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
externalMasters List<GetZonesZoneExternalMaster>: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
freeformTags Map<String,String>: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
id String: The OCID of the zone.
isProtected Boolean: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameservers List<GetZonesZoneNameserver>: The authoritative nameservers for the zone.
scope String: Specifies to operate only on resources that have a matching DNS scope.
self String: The canonical absolute URL of the resource.
serial Integer: The current serial of the zone. As seen in the zone's SOA record.
state String: The state of a resource.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
version String: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
viewId String: The OCID of the view the resource is associated with.
zoneTransferServers List<GetZonesZoneZoneTransferServer>: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
zoneType String: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId string: The OCID of the compartment the resource belongs to.
definedTags {[key: string]: string}: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
dnssecConfigs GetZonesZoneDnssecConfig[]: DNSSEC configuration data.
dnssecState string: Search for zones that have the given DnssecState.
externalDownstreams GetZonesZoneExternalDownstream[]: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
externalMasters GetZonesZoneExternalMaster[]: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
freeformTags {[key: string]: string}: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
id string: The OCID of the zone.
isProtected boolean: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
name string: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameservers GetZonesZoneNameserver[]: The authoritative nameservers for the zone.
scope string: Specifies to operate only on resources that have a matching DNS scope.
self string: The canonical absolute URL of the resource.
serial number: The current serial of the zone. As seen in the zone's SOA record.
state string: The state of a resource.
timeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
version string: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
viewId string: The OCID of the view the resource is associated with.
zoneTransferServers GetZonesZoneZoneTransferServer[]: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
zoneType string: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartment_id str: The OCID of the compartment the resource belongs to.
defined_tags Mapping[str, str]: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
dnssec_configs Sequence[GetZonesZoneDnssecConfig]: DNSSEC configuration data.
dnssec_state str: Search for zones that have the given DnssecState.
external_downstreams Sequence[GetZonesZoneExternalDownstream]: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
external_masters Sequence[GetZonesZoneExternalMaster]: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
freeform_tags Mapping[str, str]: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
id str: The OCID of the zone.
is_protected bool: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
name str: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameservers Sequence[GetZonesZoneNameserver]: The authoritative nameservers for the zone.
scope str: Specifies to operate only on resources that have a matching DNS scope.
self str: The canonical absolute URL of the resource.
serial int: The current serial of the zone. As seen in the zone's SOA record.
state str: The state of a resource.
time_created str: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
version str: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
view_id str: The OCID of the view the resource is associated with.
zone_transfer_servers Sequence[GetZonesZoneZoneTransferServer]: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
zone_type str: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

compartmentId String: The OCID of the compartment the resource belongs to.
definedTags Map<String>: Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags.
dnssecConfigs List<Property Map>: DNSSEC configuration data.
dnssecState String: Search for zones that have the given DnssecState.
externalDownstreams List<Property Map>: External secondary servers for the zone. This field is currently not supported when zoneType is SECONDARY or scope is PRIVATE.
externalMasters List<Property Map>: External master servers for the zone. externalMasters becomes a required parameter when the zoneType value is SECONDARY.
freeformTags Map<String>: Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags.
id String: The OCID of the zone.
isProtected Boolean: A Boolean flag indicating whether or not parts of the resource are unable to be explicitly managed.
name String: A case-sensitive filter for zone names. Will match any zone with a name that equals the provided value.
nameservers List<Property Map>: The authoritative nameservers for the zone.
scope String: Specifies to operate only on resources that have a matching DNS scope.
self String: The canonical absolute URL of the resource.
serial Number: The current serial of the zone. As seen in the zone's SOA record.
state String: The state of a resource.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
version String: Version is the never-repeating, totally-orderable, version of the zone, from which the serial field of the zone's SOA record is derived.
viewId String: The OCID of the view the resource is associated with.
zoneTransferServers List<Property Map>: The Oracle Cloud Infrastructure nameservers that transfer the zone data with external nameservers.
zoneType String: Search by zone type, PRIMARY or SECONDARY. Will match any zone whose type equals the provided value.

GetZonesZoneDnssecConfig

KskDnssecKeyVersions List<GetZonesZoneDnssecConfigKskDnssecKeyVersion>: A read-only array of key signing key (KSK) versions.
ZskDnssecKeyVersions List<GetZonesZoneDnssecConfigZskDnssecKeyVersion>: A read-only array of zone signing key (ZSK) versions.

KskDnssecKeyVersions []GetZonesZoneDnssecConfigKskDnssecKeyVersion: A read-only array of key signing key (KSK) versions.
ZskDnssecKeyVersions []GetZonesZoneDnssecConfigZskDnssecKeyVersion: A read-only array of zone signing key (ZSK) versions.

kskDnssecKeyVersions List<GetZonesZonesecConfigKsksecKeyVersion>: A read-only array of key signing key (KSK) versions.
zskDnssecKeyVersions List<GetZonesZonesecConfigZsksecKeyVersion>: A read-only array of zone signing key (ZSK) versions.

kskDnssecKeyVersions GetZonesZoneDnssecConfigKskDnssecKeyVersion[]: A read-only array of key signing key (KSK) versions.
zskDnssecKeyVersions GetZonesZoneDnssecConfigZskDnssecKeyVersion[]: A read-only array of zone signing key (ZSK) versions.

ksk_dnssec_key_versions Sequence[GetZonesZoneDnssecConfigKskDnssecKeyVersion]: A read-only array of key signing key (KSK) versions.
zsk_dnssec_key_versions Sequence[GetZonesZoneDnssecConfigZskDnssecKeyVersion]: A read-only array of zone signing key (ZSK) versions.

kskDnssecKeyVersions List<Property Map>: A read-only array of key signing key (KSK) versions.
zskDnssecKeyVersions List<Property Map>: A read-only array of zone signing key (ZSK) versions.

GetZonesZoneDnssecConfigKskDnssecKeyVersion

Algorithm string: The signing algorithm used for the key.
DsDatas List<GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData>: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
KeyTag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
LengthInBytes int: The length of the corresponding private key in bytes, expressed as an integer.
PredecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
SuccessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
TimeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
TimeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
TimeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
TimePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
TimePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
TimeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Uuid string: The UUID of the DnssecKeyVersion.

Algorithm string: The signing algorithm used for the key.
DsDatas []GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
KeyTag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
LengthInBytes int: The length of the corresponding private key in bytes, expressed as an integer.
PredecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
SuccessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
TimeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
TimeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
TimeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
TimePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
TimePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
TimeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Uuid string: The UUID of the DnssecKeyVersion.

algorithm String: The signing algorithm used for the key.
dsDatas List<GetZonesZonesecConfigKsksecKeyVersionDsData>: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
keyTag Integer: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes Integer: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated String: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired String: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated String: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted String: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished String: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished String: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid String: The UUID of the DnssecKeyVersion.

algorithm string: The signing algorithm used for the key.
dsDatas GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData[]: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
keyTag number: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes number: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid string: The UUID of the DnssecKeyVersion.

algorithm str: The signing algorithm used for the key.
ds_datas Sequence[GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData]: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
key_tag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
length_in_bytes int: The length of the corresponding private key in bytes, expressed as an integer.
predecessor_dnssec_key_version_uuid str: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successor_dnssec_key_version_uuid str: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
time_activated str: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
time_created str: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
time_expired str: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
time_inactivated str: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
time_promoted str: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
time_published str: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
time_unpublished str: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid str: The UUID of the DnssecKeyVersion.

algorithm String: The signing algorithm used for the key.
dsDatas List<Property Map>: An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
keyTag Number: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes Number: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated String: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired String: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated String: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted String: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished String: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished String: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid String: The UUID of the DnssecKeyVersion.

GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData

DigestType string: The type of the digest associated with the rdata.
Rdata string: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

DigestType string: The type of the digest associated with the rdata.
Rdata string: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

digestType String: The type of the digest associated with the rdata.
rdata String: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

digestType string: The type of the digest associated with the rdata.
rdata string: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

digest_type str: The type of the digest associated with the rdata.
rdata str: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

digestType String: The type of the digest associated with the rdata.
rdata String: Presentation-format DS record data that must be added to the parent zone. For more information about RDATA, see Supported DNS Resource Record Types

GetZonesZoneDnssecConfigZskDnssecKeyVersion

Algorithm string: The signing algorithm used for the key.
KeyTag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
LengthInBytes int: The length of the corresponding private key in bytes, expressed as an integer.
PredecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
SuccessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
TimeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
TimeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
TimeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
TimePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
TimePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
TimeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Uuid string: The UUID of the DnssecKeyVersion.

Algorithm string: The signing algorithm used for the key.
KeyTag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
LengthInBytes int: The length of the corresponding private key in bytes, expressed as an integer.
PredecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
SuccessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
TimeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
TimeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
TimeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
TimeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
TimePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
TimePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
TimeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Uuid string: The UUID of the DnssecKeyVersion.

algorithm String: The signing algorithm used for the key.
keyTag Integer: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes Integer: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated String: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired String: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated String: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted String: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished String: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished String: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid String: The UUID of the DnssecKeyVersion.

algorithm string: The signing algorithm used for the key.
keyTag number: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes number: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid string: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated string: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated string: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired string: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated string: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted string: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished string: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished string: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid string: The UUID of the DnssecKeyVersion.

algorithm str: The signing algorithm used for the key.
key_tag int: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
length_in_bytes int: The length of the corresponding private key in bytes, expressed as an integer.
predecessor_dnssec_key_version_uuid str: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successor_dnssec_key_version_uuid str: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
time_activated str: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
time_created str: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
time_expired str: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
time_inactivated str: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
time_promoted str: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
time_published str: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
time_unpublished str: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid str: The UUID of the DnssecKeyVersion.

algorithm String: The signing algorithm used for the key.
keyTag Number: The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
lengthInBytes Number: The length of the corresponding private key in bytes, expressed as an integer.
predecessorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
successorDnssecKeyVersionUuid String: When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
timeActivated String: The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
timeCreated String: The date and time the resource was created in "YYYY-MM-ddThh:mm:ssZ" format with a Z offset, as defined by RFC 3339.
timeExpired String: The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion's successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
timeInactivated String: The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
timePromoted String: The date and time the key version was promoted expressed in RFC 3339 timestamp format.
timePublished String: The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
timeUnpublished String: The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
uuid String: The UUID of the DnssecKeyVersion.

GetZonesZoneExternalDownstream

Address string: The server's IP address (IPv4 or IPv6).
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
TsigKeyId string: Search for zones that are associated with a TSIG key.

Address string: The server's IP address (IPv4 or IPv6).
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
TsigKeyId string: Search for zones that are associated with a TSIG key.

address String: The server's IP address (IPv4 or IPv6).
port Integer: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId String: Search for zones that are associated with a TSIG key.

address string: The server's IP address (IPv4 or IPv6).
port number: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId string: Search for zones that are associated with a TSIG key.

address str: The server's IP address (IPv4 or IPv6).
port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsig_key_id str: Search for zones that are associated with a TSIG key.

address String: The server's IP address (IPv4 or IPv6).
port Number: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId String: Search for zones that are associated with a TSIG key.

GetZonesZoneExternalMaster

Address string: The server's IP address (IPv4 or IPv6).
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
TsigKeyId string: Search for zones that are associated with a TSIG key.

Address string: The server's IP address (IPv4 or IPv6).
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
TsigKeyId string: Search for zones that are associated with a TSIG key.

address String: The server's IP address (IPv4 or IPv6).
port Integer: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId String: Search for zones that are associated with a TSIG key.

address string: The server's IP address (IPv4 or IPv6).
port number: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId string: Search for zones that are associated with a TSIG key.

address str: The server's IP address (IPv4 or IPv6).
port int: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsig_key_id str: Search for zones that are associated with a TSIG key.

address String: The server's IP address (IPv4 or IPv6).
port Number: The server's port. Port value must be a value of 53, otherwise omit the port value.
tsigKeyId String: Search for zones that are associated with a TSIG key.

GetZonesZoneNameserver

Hostname string: The hostname of the nameserver.

Hostname string: The hostname of the nameserver.

hostname String: The hostname of the nameserver.

hostname string: The hostname of the nameserver.

hostname str: The hostname of the nameserver.

hostname String: The hostname of the nameserver.

GetZonesZoneZoneTransferServer

Address string: The server's IP address (IPv4 or IPv6).
IsTransferDestination bool: A Boolean flag indicating whether or not the server is a zone data transfer destination.
IsTransferSource bool: A Boolean flag indicating whether or not the server is a zone data transfer source.
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.

Address string: The server's IP address (IPv4 or IPv6).
IsTransferDestination bool: A Boolean flag indicating whether or not the server is a zone data transfer destination.
IsTransferSource bool: A Boolean flag indicating whether or not the server is a zone data transfer source.
Port int: The server's port. Port value must be a value of 53, otherwise omit the port value.

address String: The server's IP address (IPv4 or IPv6).
isTransferDestination Boolean: A Boolean flag indicating whether or not the server is a zone data transfer destination.
isTransferSource Boolean: A Boolean flag indicating whether or not the server is a zone data transfer source.
port Integer: The server's port. Port value must be a value of 53, otherwise omit the port value.

address string: The server's IP address (IPv4 or IPv6).
isTransferDestination boolean: A Boolean flag indicating whether or not the server is a zone data transfer destination.
isTransferSource boolean: A Boolean flag indicating whether or not the server is a zone data transfer source.
port number: The server's port. Port value must be a value of 53, otherwise omit the port value.

address str: The server's IP address (IPv4 or IPv6).
is_transfer_destination bool: A Boolean flag indicating whether or not the server is a zone data transfer destination.
is_transfer_source bool: A Boolean flag indicating whether or not the server is a zone data transfer source.
port int: The server's port. Port value must be a value of 53, otherwise omit the port value.

address String: The server's IP address (IPv4 or IPv6).
isTransferDestination Boolean: A Boolean flag indicating whether or not the server is a zone data transfer destination.
isTransferSource Boolean: A Boolean flag indicating whether or not the server is a zone data transfer source.
port Number: The server's port. Port value must be a value of 53, otherwise omit the port value.

Package Details

Repository: oci pulumi/pulumi-oci
License: Apache-2.0
Notes: This Pulumi package is based on the oci Terraform Provider.

Oracle Cloud Infrastructure v2.33.0 published on Thursday, May 1, 2025 by Pulumi

pulumi/pulumi-oci

oci.Dns.getZones

On this page

On this page

Example Usage

Using getZones

getZones Result

Supporting Types

GetZonesFilter

GetZonesZone

GetZonesZoneDnssecConfig

GetZonesZoneDnssecConfigKskDnssecKeyVersion

GetZonesZoneDnssecConfigKskDnssecKeyVersionDsData

GetZonesZoneDnssecConfigZskDnssecKeyVersion

GetZonesZoneExternalDownstream

GetZonesZoneExternalMaster

GetZonesZoneNameserver

GetZonesZoneZoneTransferServer

Package Details

On this page

On this page