KMS actions

Every KMS action

• AWS KMS Cancel Key DeletionCancel a scheduled deletion of an AWS KMS key.
• AWS KMS Create AliasCreate a friendly alias for an AWS KMS key.
• AWS KMS Create GrantGrant a principal permission to use a KMS key for specific operations.
• AWS KMS Create KeyCreate an AWS KMS key for encryption, signing or MAC generation.
• AWS KMS DecryptDecrypt a base64 KMS ciphertext blob back to plaintext.
• AWS KMS Delete AliasDelete an alias for an AWS KMS key.
• AWS KMS Delete Imported Key MaterialDelete imported key material from a KMS key, rendering it unusable.
• AWS KMS Describe KeyDescribe an AWS KMS key by ID, ARN or alias.
• AWS KMS Disable KeyDisable an AWS KMS key so it cannot be used for cryptographic operations.
• AWS KMS Disable Key RotationDisable automatic rotation of a KMS key's material.
• AWS KMS Enable KeyEnable an AWS KMS key so it can be used for cryptographic operations.
• AWS KMS Enable Key RotationEnable automatic annual rotation of a KMS key's material.
• AWS KMS EncryptEncrypt plaintext with a KMS key, returning a base64 ciphertext blob.
• AWS KMS Generate Data KeyGenerate a symmetric data key returning both plaintext and encrypted forms.
• AWS KMS Generate Data Key (Encrypted Only)Generate a data key returning only its encrypted form, never the plaintext.
• AWS KMS Generate Data Key PairGenerate an asymmetric data key pair returning plaintext and encrypted private keys.
• AWS KMS Generate Data Key Pair Without PlaintextGenerate an asymmetric data key pair returning only the encrypted private key.
• AWS KMS Generate MACGenerate an HMAC for a message using a KMS HMAC key.
• AWS KMS Generate RandomGenerate cryptographically secure random bytes via AWS KMS.
• AWS KMS Get Key PolicyRetrieve the key policy document attached to a KMS key.
• AWS KMS Get Key Rotation StatusReport whether automatic rotation is enabled for a KMS key.
• AWS KMS Get Parameters For ImportGet the public wrapping key and import token needed to import key material.
• AWS KMS Get Public KeyRetrieve the public key of a KMS asymmetric key.
• AWS KMS Import Key MaterialImport wrapped key material into a KMS key with EXTERNAL origin.
• AWS KMS List AliasesList KMS aliases, optionally filtered to a single key.
• AWS KMS List GrantsList the grants attached to a KMS key.
• AWS KMS List KeysList all AWS KMS keys in the account and region.
• AWS KMS List Resource TagsList the tags attached to a KMS key.
• AWS KMS Put Key PolicyAttach or replace the key policy document on a KMS key.
• AWS KMS Re-EncryptRe-encrypt a ciphertext blob under a different KMS key without exposing plaintext.
• AWS KMS Replicate KeyReplicate a multi-region KMS key into another AWS region.
• AWS KMS Retire GrantRetire a KMS grant using a grant token or key ID and grant ID.
• AWS KMS Revoke GrantRevoke a KMS grant by key ID and grant ID.
• AWS KMS Schedule Key DeletionSchedule an AWS KMS key for deletion after a waiting period.
• AWS KMS SignSign a message with a KMS asymmetric key, returning a base64 signature.
• AWS KMS Tag ResourceAdd or update tags on a KMS key.
• AWS KMS Untag ResourceRemove tags from a KMS key by tag key.
• AWS KMS Update AliasRe-point an existing KMS alias to a different key.
• AWS KMS Update Key DescriptionUpdate the description of an AWS KMS key.
• AWS KMS Update Primary RegionChange the primary region of a multi-region KMS key.
• AWS KMS VerifyVerify a base64 signature against a message with a KMS key.
• AWS KMS Verify MACVerify an HMAC for a message using a KMS HMAC key.

Also in AWS