com.amazonaws.services.kms.model

Class CreateGrantRequest

java.lang.Object

com.amazonaws.AmazonWebServiceRequest

com.amazonaws.services.kms.model.CreateGrantRequest

All Implemented Interfaces:

Serializable

public class CreateGrantRequest
extends AmazonWebServiceRequest
implements Serializable

Container for the parameters to the CreateGrant operation.

Adds a grant to a key to specify who can access the key and under what conditions. Grants are alternate permission mechanisms to key policies. If absent, access to the key is evaluated based on IAM policies attached to the user. By default, grants do not expire. Grants can be listed, retired, or revoked as indicated by the following APIs. Typically, when you are finished using a grant, you retire it. When you want to end a grant immediately, revoke it. For more information about grants, see Grants .

1. ListGrants
2. RetireGrant
3. RevokeGrant

See Also:

AWSKMS.createGrant(CreateGrantRequest), Serialized Form

Field Summary

Fields inherited from class com.amazonaws.AmazonWebServiceRequest

NOOP

Constructor Summary

Constructors

Constructor and Description
CreateGrantRequest()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	equals(Object obj)
GrantConstraints	getConstraints() Specifies the conditions under which the actions specified by the Operations parameter are allowed.
String	getGranteePrincipal() Principal given permission by the grant to use the key identified by the keyId parameter.
List<String>	getGrantTokens() List of grant tokens.
String	getKeyId() A unique key identifier for a customer master key.
List<String>	getOperations() List of operations permitted by the grant.
String	getRetiringPrincipal() Principal given permission to retire the grant.
int	hashCode()
void	setConstraints(GrantConstraints constraints) Specifies the conditions under which the actions specified by the Operations parameter are allowed.
void	setGranteePrincipal(String granteePrincipal) Principal given permission by the grant to use the key identified by the keyId parameter.
void	setGrantTokens(Collection<String> grantTokens) List of grant tokens.
void	setKeyId(String keyId) A unique key identifier for a customer master key.
void	setOperations(Collection<String> operations) List of operations permitted by the grant.
void	setRetiringPrincipal(String retiringPrincipal) Principal given permission to retire the grant.
String	toString() Returns a string representation of this object; useful for testing and debugging.
CreateGrantRequest	withConstraints(GrantConstraints constraints) Specifies the conditions under which the actions specified by the Operations parameter are allowed.
CreateGrantRequest	withGranteePrincipal(String granteePrincipal) Principal given permission by the grant to use the key identified by the keyId parameter.
CreateGrantRequest	withGrantTokens(Collection<String> grantTokens) List of grant tokens.
CreateGrantRequest	withGrantTokens(String... grantTokens) List of grant tokens.
CreateGrantRequest	withKeyId(String keyId) A unique key identifier for a customer master key.
CreateGrantRequest	withOperations(Collection<String> operations) List of operations permitted by the grant.
CreateGrantRequest	withOperations(GrantOperation... operations) List of operations permitted by the grant.
CreateGrantRequest	withOperations(String... operations) List of operations permitted by the grant.
CreateGrantRequest	withRetiringPrincipal(String retiringPrincipal) Principal given permission to retire the grant.

Methods inherited from class com.amazonaws.AmazonWebServiceRequest

copyBaseTo, copyPrivateRequestParameters, getCustomRequestHeaders, getGeneralProgressListener, getReadLimit, getRequestClientOptions, getRequestCredentials, getRequestMetricCollector, putCustomRequestHeader, setGeneralProgressListener, setRequestCredentials, setRequestMetricCollector, withGeneralProgressListener, withRequestMetricCollector

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Constructor Detail

CreateGrantRequest

public CreateGrantRequest()

Method Detail

getKeyId

public String getKeyId()

A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

Constraints:
Length: 1 - 256

Returns:

A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

setKeyId

public void setKeyId(String keyId)

A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

Constraints:
Length: 1 - 256

Parameters:

keyId - A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

withKeyId

public CreateGrantRequest withKeyId(String keyId)

A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

Returns a reference to this object so that method calls can be chained together.

Constraints:
Length: 1 - 256

Parameters:

keyId - A unique key identifier for a customer master key. This value can be a globally unique identifier, an ARN, or an alias.

Returns:

A reference to this updated object so that method calls can be chained together.

getGranteePrincipal

public String getGranteePrincipal()

Principal given permission by the grant to use the key identified by the keyId parameter.

Constraints:
Length: 1 - 256

Returns:

Principal given permission by the grant to use the key identified by the keyId parameter.

setGranteePrincipal

public void setGranteePrincipal(String granteePrincipal)

Principal given permission by the grant to use the key identified by the keyId parameter.

Constraints:
Length: 1 - 256

Parameters:

granteePrincipal - Principal given permission by the grant to use the key identified by the keyId parameter.

withGranteePrincipal

public CreateGrantRequest withGranteePrincipal(String granteePrincipal)

Principal given permission by the grant to use the key identified by the keyId parameter.

Returns a reference to this object so that method calls can be chained together.

Constraints:
Length: 1 - 256

Parameters:

granteePrincipal - Principal given permission by the grant to use the key identified by the keyId parameter.

Returns:

A reference to this updated object so that method calls can be chained together.

getRetiringPrincipal

public String getRetiringPrincipal()

Principal given permission to retire the grant. For more information, see RetireGrant.

Constraints:
Length: 1 - 256

Returns:

Principal given permission to retire the grant. For more information, see RetireGrant.

setRetiringPrincipal

public void setRetiringPrincipal(String retiringPrincipal)

Principal given permission to retire the grant. For more information, see RetireGrant.

Constraints:
Length: 1 - 256

Parameters:

retiringPrincipal - Principal given permission to retire the grant. For more information, see RetireGrant.

withRetiringPrincipal

public CreateGrantRequest withRetiringPrincipal(String retiringPrincipal)

Principal given permission to retire the grant. For more information, see RetireGrant.

Returns a reference to this object so that method calls can be chained together.

Constraints:
Length: 1 - 256

Parameters:

retiringPrincipal - Principal given permission to retire the grant. For more information, see RetireGrant.

Returns:

A reference to this updated object so that method calls can be chained together.

getOperations

public List<String> getOperations()

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns:

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

setOperations

public void setOperations(Collection<String> operations)

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Parameters:

operations - List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

withOperations

public CreateGrantRequest withOperations(String... operations)

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns a reference to this object so that method calls can be chained together.

Parameters:

operations - List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns:

A reference to this updated object so that method calls can be chained together.

withOperations

public CreateGrantRequest withOperations(Collection<String> operations)

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns a reference to this object so that method calls can be chained together.

Parameters:

operations - List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns:

A reference to this updated object so that method calls can be chained together.

withOperations

public CreateGrantRequest withOperations(GrantOperation... operations)

List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns a reference to this object so that method calls can be chained together.

Parameters:

operations - List of operations permitted by the grant. This can be any combination of one or more of the following values:

1. Decrypt
2. Encrypt
3. GenerateDataKey
4. GenerateDataKeyWithoutPlaintext
5. ReEncryptFrom
6. ReEncryptTo
7. CreateGrant

Returns:

A reference to this updated object so that method calls can be chained together.

getConstraints

public GrantConstraints getConstraints()

Specifies the conditions under which the actions specified by the Operations parameter are allowed.

Returns:

Specifies the conditions under which the actions specified by the Operations parameter are allowed.

setConstraints

public void setConstraints(GrantConstraints constraints)

Specifies the conditions under which the actions specified by the Operations parameter are allowed.

Parameters:

constraints - Specifies the conditions under which the actions specified by the Operations parameter are allowed.

withConstraints

public CreateGrantRequest withConstraints(GrantConstraints constraints)

Specifies the conditions under which the actions specified by the Operations parameter are allowed.

Returns a reference to this object so that method calls can be chained together.

Parameters:

constraints - Specifies the conditions under which the actions specified by the Operations parameter are allowed.

Returns:

A reference to this updated object so that method calls can be chained together.

getGrantTokens

public List<String> getGrantTokens()

List of grant tokens.

Constraints:
Length: 0 - 10

Returns:

List of grant tokens.

setGrantTokens

public void setGrantTokens(Collection<String> grantTokens)

List of grant tokens.

Constraints:
Length: 0 - 10

Parameters:

grantTokens - List of grant tokens.

withGrantTokens

public CreateGrantRequest withGrantTokens(String... grantTokens)

List of grant tokens.

Returns a reference to this object so that method calls can be chained together.

Constraints:
Length: 0 - 10

Parameters:

grantTokens - List of grant tokens.

Returns:

A reference to this updated object so that method calls can be chained together.

withGrantTokens

public CreateGrantRequest withGrantTokens(Collection<String> grantTokens)

List of grant tokens.

Returns a reference to this object so that method calls can be chained together.

Constraints:
Length: 0 - 10

Parameters:

grantTokens - List of grant tokens.

Returns:

A reference to this updated object so that method calls can be chained together.

toString

public String toString()

Returns a string representation of this object; useful for testing and debugging.

Overrides:

toString in class Object

Returns:

A string representation of this object.

See Also:

Object.toString()

hashCode

public int hashCode()

Overrides:

hashCode in class Object

equals

public boolean equals(Object obj)

Overrides:

equals in class Object