KMS

AWS's kms service · portable interface driver.KMS · AWS index

Operations (46)

Operation	Description
`CancelKeyDeletion`
`CreateAlias`	Aliases.
`CreateGrant`	Grants.
`CreateKey`	Key lifecycle.
`Decrypt`
`DeleteAlias`
`DeleteImportedKeyMaterial`
`DescribeKey`
`DisableKey`
`DisableKeyRotation`
`EnableKey`
`EnableKeyRotation`	Rotation.
`Encrypt`
`GenerateDataKey`
`GenerateDataKeyPair`
`GenerateDataKeyPairWithoutPlaintext`
`GenerateDataKeyWithoutPlaintext`
`GenerateMac`
`GenerateRandom`
`GetKeyPolicy`	Key policies.
`GetKeyRotationStatus`
`GetParametersForImport`
`GetPublicKey`
`ImportKeyMaterial`
`ListAliases`
`ListGrants`
`ListKeyPolicies`
`ListKeyRotations`
`ListKeys`
`ListResourceTags`
`ListRetirableGrants`
`PutKeyPolicy`
`ReEncrypt`
`ReplicateKey`
`RetireGrant`
`RevokeGrant`
`RotateKeyOnDemand`
`ScheduleKeyDeletion`
`Sign`
`TagResource`	Tags.
`UntagResource`
`UpdateAlias`
`UpdateKeyDescription`
`UpdatePrimaryRegion`
`Verify`
`VerifyMac`

Discovered by type assertion; only some providers implement these.

Crypto is the cryptographic surface of KMS. It is embedded in the KMS

Operation	Description
`Decrypt`
`Encrypt`
`GenerateDataKey`
`GenerateDataKeyPair`
`GenerateDataKeyPairWithoutPlaintext`
`GenerateDataKeyWithoutPlaintext`
`GenerateMac`
`GenerateRandom`
`GetPublicKey`
`ReEncrypt`
`Sign`
`Verify`
`VerifyMac`

KeyImport is the import-material and multi-region surface of KMS.

Operation	Description
`DeleteImportedKeyMaterial`
`GetParametersForImport`
`ImportKeyMaterial`
`ReplicateKey`
`UpdatePrimaryRegion`

Management is the grants/rotation/policy surface of KMS.

Not documented yet. See the emulator boundary for cloudemu-wide non-goals.