ImportKeyMaterialRequest

import type { ImportKeyMaterialRequest } from "https://aws-api.deno.dev/v0.3/services/kms.ts?docs=full";

interface ImportKeyMaterialRequest {

EncryptedKeyMaterial: Uint8Array | string;

ExpirationModel?: ExpirationModelType | null;

ImportToken: Uint8Array | string;

KeyId: string;

ValidTo?: Date | number | null;

}

§Properties

EncryptedKeyMaterial: Uint8Array | string

[src]

The encrypted key material to import. The key material must be encrypted with the public wrapping key that "GetParametersForImport" returned, using the wrapping algorithm that you specified in the same GetParametersForImport request.

ExpirationModel?: ExpirationModelType | null

[src]

Specifies whether the key material expires. The default is KEY_MATERIAL_EXPIRES, in which case you must include the ValidTo parameter. When this parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE, you must omit the ValidTo parameter.

ImportToken: Uint8Array | string

[src]

The import token that you received in the response to a previous "GetParametersForImport" request. It must be from the same response that contained the public key that you used to encrypt the key material.

KeyId: string

[src]

The identifier of the symmetric KMS key that receives the imported key material. The KMS key's Origin must be EXTERNAL. This must be the same KMS key specified in the KeyID parameter of the corresponding "GetParametersForImport" request.

Specify the key ID or key ARN of the KMS key.

For example:

Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

To get the key ID and key ARN for a KMS key, use "ListKeys" or "DescribeKey".

ValidTo?: Date | number | null

[src]

The time at which the imported key material expires. When the key material expires, KMS deletes the key material and the KMS key becomes unusable. You must omit this parameter when the ExpirationModel parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE. Otherwise it is required.