ExAws v1.1.4 ExAws.KMS View Source

Operations on AWS KMS

Link to this section Summary

Functions

Canel a key deletion

Creates a customer master key (CMK)

Decrypts ciphertext

Delete a alias

Delete a imported key material

Disable a key rotation

Enable a key

Enable a key rotation

Encrypt a data by a key

Generate a data key without plaintext

Generates an unpredictable byte string

Retrieves a policy attached to the specified key

Indicates whether key rotation is enabled for the specified key

Imports key material into an AWS KMS customer master key (CMK)

Lists all of the key aliases

List the grants for a specified key

Retrieves a list of policies attached to a key

Lists the customer master keys

A list of all grants for which the grant’s RetiringPrincipal matches the one specified

Attaches a key policy to the specified customer master key (CMK)

Encrypts data with a new CMK without exposing the plaintext of the data

Retires a grant

Updates an alias to map it to a different key

Updates the description of a key

Link to this section Types

Link to this type describe_key_opts() View Source
describe_key_opts() :: [{:grant_tokens, [binary]}]
Link to this type disable_key_opts() View Source
disable_key_opts() :: [{:grant_tokens, [binary]}]
Link to this type encrypt_opts() View Source
encrypt_opts() :: [encryption_context: map, grant_tokens: [binary]]
Link to this type generate_data_key_opts() View Source
generate_data_key_opts() :: [encryption_context: map, grant_tokens: [binary], key_spec: binary, number_of_bytes: pos_integer]
Link to this type generate_data_key_without_plaintext_opts() View Source
generate_data_key_without_plaintext_opts() :: [encryption_context: map, grant_tokens: [binary], key_spec: binary, number_of_bytes: pos_integer]
Link to this type import_key_material_opts() View Source
import_key_material_opts() :: [expiration_model: binary, valid_to: binary]
Link to this type list_aliases_opts() View Source
list_aliases_opts() :: [limit: integer, marker: binary]
Link to this type list_grants_opts() View Source
list_grants_opts() :: [limit: integer, marker: binary]
Link to this type list_key_policies_opts() View Source
list_key_policies_opts() :: [limit: integer, marker: binary]
Link to this type list_keys_opts() View Source
list_keys_opts() :: [limit: integer, marker: binary]
Link to this type list_retirable_grants_opts() View Source
list_retirable_grants_opts() :: [limit: integer, marker: binary]
Link to this type re_encrypt_opts() View Source
re_encrypt_opts() :: [destination_encryption_context: map, grant_tokens: [binary], source_encryption_context: map]
Link to this type retire_grant_opts() View Source
retire_grant_opts() :: [grant_id: binary, grant_token: binary, key_id: binary]

Link to this section Functions

Link to this function cancel_key_deletion(key_id) View Source
cancel_key_deletion(key_id :: binary) :: ExAws.Operation.JSON.t

Canel a key deletion

Link to this function create_alias(alias_name, target_key_id) View Source
create_alias(alias_name :: binary, target_key_id :: binary) :: ExAws.Operation.JSON.t

Create a alias

Link to this function create_grant(grantee_principal, key_id, opts \\ []) View Source
create_grant(grantee_principal :: binary, key_id :: binary, opts :: Keyword.t) :: ExAws.Operation.JSON.t

Adds a grant to a key

Link to this function create_key(opts \\ []) View Source
create_key(opts :: Keyword.t) :: ExAws.Operation.JSON.t

Creates a customer master key (CMK)

Link to this function decrypt(ciphertext, opts \\ []) View Source
decrypt(ciphertext :: binary, opts :: Keyword.t) :: ExAws.Operation.JSON.t

Decrypts ciphertext

Link to this function delete_alias(alias_name) View Source
delete_alias(alias_name :: binary) :: ExAws.Operation.JSON.t

Delete a alias

Link to this function delete_imported_key_material(key_id) View Source
delete_imported_key_material(key_id :: binary) :: ExAws.Operation.JSON.t

Delete a imported key material

Link to this function describe_key(key_id, opts \\ []) View Source
describe_key(key_id :: binary, opts :: describe_key_opts) :: ExAws.Operation.JSON.t

Describe a key

Link to this function disable_key(key_id, opts \\ []) View Source
disable_key(key_id :: binary, opts :: disable_key_opts) :: ExAws.Operation.JSON.t

Disable a key

Link to this function disable_key_rotation(key_id) View Source
disable_key_rotation(key_id :: binary) :: ExAws.Operation.JSON.t

Disable a key rotation

Link to this function enable_key(key_id) View Source
enable_key(key_id :: binary) :: ExAws.Operation.JSON.t

Enable a key

Link to this function enable_key_rotation(key_id) View Source
enable_key_rotation(key_id :: binary) :: ExAws.Operation.JSON.t

Enable a key rotation

Link to this function encrypt(key_id, plaintext, opts \\ []) View Source
encrypt(key_id :: binary, plaintext :: binary, opts :: encrypt_opts) :: ExAws.Operation.JSON.t

Encrypt a data by a key

Link to this function generate_data_key(key_id, opts \\ []) View Source
generate_data_key(key_id :: binary, opts :: generate_data_key_opts) :: ExAws.Operation.JSON.t

Generate a data key

Link to this function generate_data_key_without_plaintext(key_id, opts \\ []) View Source
generate_data_key_without_plaintext(key_id :: binary, opts :: generate_data_key_without_plaintext_opts) :: ExAws.Operation.JSON.t

Generate a data key without plaintext

Link to this function generate_random(number_of_bytes) View Source
generate_random(number_of_bytes :: pos_integer) :: ExAws.Operation.JSON.t

Generates an unpredictable byte string

Link to this function get_key_policy(key_id, policy_name) View Source
get_key_policy(key_id :: binary, policy_name :: binary) :: ExAws.Operation.JSON.t

Retrieves a policy attached to the specified key

Link to this function get_key_rotation_status(key_id) View Source
get_key_rotation_status(key_id :: binary) :: ExAws.Operation.JSON.t

Indicates whether key rotation is enabled for the specified key

Link to this function get_parameters_for_import(key_id, wrapping_algorithm \\ "RSAES_PKCS1_V1_5", wrapping_key_spec \\ "RSA_2048") View Source
get_parameters_for_import(key_id :: binary, wrapping_algorithm :: binary, wrapping_key_spec :: binary) :: ExAws.Operation.JSON.t

Import key matrial

Link to this function import_key_material(encrypted_key_material, import_token, key_id, opts \\ []) View Source
import_key_material(encrypted_key_material :: binary, import_token :: binary, key_id :: binary, opts :: import_key_material_opts) :: ExAws.Operation.JSON.t

Imports key material into an AWS KMS customer master key (CMK)

Link to this function list_aliases(opts \\ []) View Source
list_aliases(opts :: list_aliases_opts) :: ExAws.Operation.JSON.t

Lists all of the key aliases

Link to this function list_grants(key_id, opts \\ []) View Source
list_grants(key_id :: binary, opts :: list_grants_opts) :: ExAws.Operation.JSON.t

List the grants for a specified key

Link to this function list_key_policies(key_id, opts \\ []) View Source
list_key_policies(key_id :: binary, opts :: list_key_policies_opts) :: ExAws.Operation.JSON.t

Retrieves a list of policies attached to a key

Lists the customer master keys

Link to this function list_retirable_grants(retiring_principal, opts \\ []) View Source
list_retirable_grants(retiring_principal :: binary, opts :: list_retirable_grants_opts) :: ExAws.Operation.JSON.t

A list of all grants for which the grant’s RetiringPrincipal matches the one specified

Link to this function put_key_policy(key_id, policy, policy_name, bypass_policy_lockout_safety_check \\ false) View Source
put_key_policy(key_id :: binary, policy :: binary, policy_name :: binary, bypass_policy_lockout_safety_check :: boolean) :: ExAws.Operation.JSON.t

Attaches a key policy to the specified customer master key (CMK)

Link to this function re_encrypt(ciphertext, destination_key_id, opts \\ []) View Source
re_encrypt(ciphertext :: binary, describe_key :: binary, opts :: re_encrypt_opts) :: ExAws.Operation.JSON.t

Encrypts data with a new CMK without exposing the plaintext of the data

Link to this function retire_grant(opts) View Source
retire_grant(opts :: retire_grant_opts) :: ExAws.Operation.JSON.t
retire_grant(grant_token :: binary) :: ExAws.Operation.JSON.t

Retires a grant

Link to this function retire_grant(grant_id, key_id) View Source
retire_grant(grant_id :: binary, key_id :: binary) :: ExAws.Operation.JSON.t

Retires a grant

Link to this function revoke_grant(grant_id, key_id) View Source
revoke_grant(grant_id :: binary, key_id :: binary) :: ExAws.Operation.JSON.t

Revokes a grant

Link to this function schedule_key_deletion(key_id, pending_windows_in_days \\ 30) View Source
schedule_key_deletion(key_id :: binary, pending_windows_in_days :: integer) :: ExAws.Operation.JSON.t

Schedules the deletion of CMK

Link to this function update_alias(alias_name, target_key_id) View Source
update_alias(alias_name :: binary, target_key_id :: binary) :: ExAws.Operation.JSON.t

Updates an alias to map it to a different key

Link to this function update_key_description(description, key_id) View Source
update_key_description(description :: binary, key_id :: binary) :: ExAws.Operation.JSON.t

Updates the description of a key