ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
terraform/website/source/docs/providers/aws/r/kms_key.html.markdown

1.4 KiB
Raw Blame History

layout page_title sidebar_current description
aws AWS: aws_kms_key docs-aws-resource-kms-key Provides a KMS customer master key.

aws_kms_key

Provides a KMS customer master key.

Example Usage

resource "aws_kms_key" "a" {
  description             = "KMS key 1"
  deletion_window_in_days = 10
}

Argument Reference

The following arguments are supported:

  • description - (Optional) The description of the key as viewed in AWS console.
  • key_usage - (Optional) Specifies the intended use of the key. Defaults to ENCRYPT/DECRYPT, and only symmetric encryption and decryption are supported.
  • policy - (Optional) A valid policy JSON document.
  • deletion_window_in_days - (Optional) Duration in days after which the key is deleted after destruction of the resource, must be between 7 and 30 days. Defaults to 30 days.
  • is_enabled - (Optional) Specifies whether the key is enabled. Defaults to true.
  • enable_key_rotation - (Optional) Specifies whether key rotation is enabled. Defaults to false.

Attributes Reference

The following attributes are exported:

  • arn - The Amazon Resource Name (ARN) of the key.
  • key_id - The globally unique identifier for the key.

Import

KMS Keys can be imported using the id, e.g.

$ terraform import aws_kms_key.a arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab