AWS Key Management Service (kms)

Updates

Actions

• CreateKey
  
  Conditions
  
  • ＋ kms:ViaService
  • ＋ kms:CallerAccount
  • － kms:MultiRegionKeyType
  • － kms:MultiRegion
  • － kms:CustomerMasterKeySpec
  • － kms:CustomerMasterKeyUsage
  • － kms:KeyOrigin
  Dependents
  
  • ＋ iam:CreateServiceLinkedRole
  • ＋ kms:PutKeyPolicy
  • ＋ kms:TagResource
• Decrypt
  
  Conditions
  
  • ＋ kms:RequestAlias
• DescribeKey
  
  Conditions
  
  • ＋ kms:RequestAlias
• Encrypt
  
  Conditions
  
  • ＋ kms:RequestAlias
• GenerateDataKey
  
  Conditions
  
  • ＋ kms:RequestAlias
• GenerateDataKeyPair
  
  Conditions
  
  • ＋ kms:RequestAlias
• GenerateDataKeyPairWithoutPlaintext
  
  Conditions
  
  • ＋ kms:RequestAlias
• GenerateDataKeyWithoutPlaintext
  
  Conditions
  
  • ＋ kms:RequestAlias
• GetPublicKey
  
  Conditions
  
  • ＋ kms:RequestAlias
• ReEncryptFrom
  
  Conditions
  
  • ＋ kms:RequestAlias
• ReEncryptTo
  
  Conditions
  
  • ＋ kms:RequestAlias
• ReplicateKey
  
  Dependents
  
  • ＋ iam:CreateServiceLinkedRole
  • ＋ kms:PutKeyPolicy
  • ＋ kms:TagResource
• Sign
  
  Conditions
  
  • ＋ kms:RequestAlias
• Verify
  
  Conditions
  
  • ＋ kms:RequestAlias
• ConnectCustomKeyStore
  
  Conditions
  
  • ＋ kms:CallerAccount
• CreateCustomKeyStore
  
  Conditions
  
  • ＋ kms:CallerAccount
  Dependents
  
  • ＋ iam:CreateServiceLinkedRole
• DeleteCustomKeyStore
  
  Conditions
  
  • ＋ kms:CallerAccount
• DescribeCustomKeyStores
  
  Conditions
  
  • ＋ kms:CallerAccount
• DisconnectCustomKeyStore
  
  Conditions
  
  • ＋ kms:CallerAccount
• UpdateCustomKeyStore
  
  Conditions
  
  • ＋ kms:CallerAccount

Conditions

• kms:ValidTo
  
  Type
  
  • Numeric  ⟶  Date