Fix

Signed-off-by: Alina Buzachis <[email protected]>

plugins/modules/route53_zone.py

@@ -186,7 +186,7 @@
     sample: "A1BCDEF2GHIJKL"
 dnssec:
     description: Information about DNSSEC for a specific hosted zone.
-    returned: when O(state=present)
+    returned: when O(state=present) and the hosted zone is public
     version_added: 9.2.0
     type: dict
     contains:
@@ -400,12 +400,13 @@ def create(matching_zones):
     zone_id = result.get("zone_id")
 
     if zone_id:
-        # Enable/Disable DNSSEC
-        changed |= ensure_dnssec(client, module, zone_id)
+        if not private_zone:
+            # Enable/Disable DNSSEC
+            changed |= ensure_dnssec(client, module, zone_id)
 
-        # Update result with information about DNSSEC
-        result["dnssec"] = camel_dict_to_snake_dict(get_dnssec(client, module, zone_id))
-        del result["dnssec"]["response_metadata"]
+            # Update result with information about DNSSEC
+            result["dnssec"] = camel_dict_to_snake_dict(get_dnssec(client, module, zone_id))
+            del result["dnssec"]["response_metadata"]
 
         # Handle Tags
         if tags is not None:

tests/integration/targets/route53_ksk/tasks/main.yml

@@ -250,6 +250,8 @@
         that:
           - _ksk_request is successful
           - _ksk_request.changed
+          - '"msg" in _ksk_request'
+          - '"Would have deleted the Key Signing Key if not in check_mode." in _ksk_request.msg'
 
     - name: Delete the Key Signing Key request
       amazon.aws.route53_ksk:
@@ -265,8 +267,6 @@
           - _ksk_request is successful
           - '"change_info" in _ksk_request'
           - _ksk_request.changed
-          - '"msg" in _ksk_request'
-          - '"Would have deteled the Key Signing Key if not in check_mode." in _ksk_request.msg'
 
     - name: Delete the Key Signing Key request (idempotency)
       amazon.aws.route53_ksk: