Contains information about an alias.

Contains information about each custom key store in the custom key store list.

Use this structure to allow cryptographic operations in the grant only when the operation request includes the specified encryption context.

Contains information about a grant.

Contains information about each entry in the key list.

Contains metadata about a KMS key.

Describes the configuration of this multi-Region key. This field appears only when the KMS key is a primary or replica of a multi-Region key.

Describes the primary or replica key in a multi-Region key.

A key-value pair. A tag consists of a tag key and a tag value. Tag keys and tag values are both required, but tag values can be empty (null) strings.

Information about the external keythat is associated with a KMS key in an external key store.

KMS uses the authentication credential to sign requests that it sends to the external key store proxy (XKS proxy) on your behalf. You establish these credentials on your external key store proxy and report them to KMS.

Detailed information about the external key store proxy (XKS proxy). Your external key store proxy translates KMS requests into a format that your external key manager can understand. These fields appear in a "DescribeCustomKeyStores" response only when the CustomKeyStoreType is EXTERNAL_KEY_STORE.