GetPublicKeyResponse

import type { GetPublicKeyResponse } from "https://aws-api.deno.dev/v0.3/services/kms.ts?docs=full";

interface GetPublicKeyResponse {

CustomerMasterKeySpec?: CustomerMasterKeySpec | null;

EncryptionAlgorithms?: EncryptionAlgorithmSpec[] | null;

KeyId?: string | null;

KeySpec?: KeySpec | null;

KeyUsage?: KeyUsageType | null;

PublicKey?: Uint8Array | null;

SigningAlgorithms?: SigningAlgorithmSpec[] | null;

}

§Properties

CustomerMasterKeySpec?: CustomerMasterKeySpec | null

[src]

Instead, use the KeySpec field in the GetPublicKey response.

The KeySpec and CustomerMasterKeySpec fields have the same value. We recommend that you use the KeySpec field in your code. However, to avoid breaking changes, KMS will support both fields.

EncryptionAlgorithms?: EncryptionAlgorithmSpec[] | null

[src]

The encryption algorithms that KMS supports for this key.

This information is critical. If a public key encrypts data outside of KMS by using an unsupported encryption algorithm, the ciphertext cannot be decrypted.

This field appears in the response only when the KeyUsage of the public key is ENCRYPT_DECRYPT.

KeyId?: string | null

[src]

The Amazon Resource Name (key ARN) of the asymmetric KMS key from which the public key was downloaded.

KeySpec?: KeySpec | null

[src]

The type of the of the public key that was downloaded.

KeyUsage?: KeyUsageType | null

[src]

The permitted use of the public key. Valid values are ENCRYPT_DECRYPT or SIGN_VERIFY.

This information is critical. If a public key with SIGN_VERIFY key usage encrypts data outside of KMS, the ciphertext cannot be decrypted.

PublicKey?: Uint8Array | null

[src]

The exported public key.

The value is a DER-encoded X.509 public key, also known as SubjectPublicKeyInfo (SPKI), as defined in RFC 5280. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.

SigningAlgorithms?: SigningAlgorithmSpec[] | null

[src]

The signing algorithms that KMS supports for this key.

This field appears in the response only when the KeyUsage of the public key is SIGN_VERIFY.