Package com.pulumi.aws.kms

Class ReplicaExternalKeyArgs.Builder

  • Enclosing class:
    ReplicaExternalKeyArgs
    public static final class ReplicaExternalKeyArgs.Builder
extends java.lang.Object

    • Method Detail

      • bypassPolicyLockoutSafetyCheck

        public ReplicaExternalKeyArgs.Builder bypassPolicyLockoutSafetyCheck​(@Nullable
                                                                     com.pulumi.core.Output<java.lang.Boolean> bypassPolicyLockoutSafetyCheck)
        Parameters:
        bypassPolicyLockoutSafetyCheck - A flag to indicate whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately. For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS Key Management Service Developer Guide_. The default value is `false`.
        Returns:
        builder

      • bypassPolicyLockoutSafetyCheck

        public ReplicaExternalKeyArgs.Builder bypassPolicyLockoutSafetyCheck​(java.lang.Boolean bypassPolicyLockoutSafetyCheck)
        Parameters:
        bypassPolicyLockoutSafetyCheck - A flag to indicate whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately. For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS Key Management Service Developer Guide_. The default value is `false`.
        Returns:
        builder

      • deletionWindowInDays

        public ReplicaExternalKeyArgs.Builder deletionWindowInDays​(@Nullable
                                                           com.pulumi.core.Output<java.lang.Integer> deletionWindowInDays)
        Parameters:
        deletionWindowInDays - The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key. If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
        Returns:
        builder

      • deletionWindowInDays

        public ReplicaExternalKeyArgs.Builder deletionWindowInDays​(java.lang.Integer deletionWindowInDays)
        Parameters:
        deletionWindowInDays - The waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key. If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
        Returns:
        builder

      • description

        public ReplicaExternalKeyArgs.Builder description​(@Nullable
                                                  com.pulumi.core.Output<java.lang.String> description)
        Parameters:
        description - A description of the KMS key.
        Returns:
        builder

      • description

        public ReplicaExternalKeyArgs.Builder description​(java.lang.String description)
        Parameters:
        description - A description of the KMS key.
        Returns:
        builder

      • enabled

        public ReplicaExternalKeyArgs.Builder enabled​(@Nullable
                                              com.pulumi.core.Output<java.lang.Boolean> enabled)
        Parameters:
        enabled - Specifies whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. Keys pending import can only be `false`. Imported keys default to `true` unless expired.
        Returns:
        builder

      • enabled

        public ReplicaExternalKeyArgs.Builder enabled​(java.lang.Boolean enabled)
        Parameters:
        enabled - Specifies whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. Keys pending import can only be `false`. Imported keys default to `true` unless expired.
        Returns:
        builder

      • keyMaterialBase64

        public ReplicaExternalKeyArgs.Builder keyMaterialBase64​(@Nullable
                                                        com.pulumi.core.Output<java.lang.String> keyMaterialBase64)
        Parameters:
        keyMaterialBase64 - Base64 encoded 256-bit symmetric encryption key material to import. The KMS key is permanently associated with this key material. The same key material can be [reimported](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html#reimport-key-material), but you cannot import different key material.
        Returns:
        builder

      • keyMaterialBase64

        public ReplicaExternalKeyArgs.Builder keyMaterialBase64​(java.lang.String keyMaterialBase64)
        Parameters:
        keyMaterialBase64 - Base64 encoded 256-bit symmetric encryption key material to import. The KMS key is permanently associated with this key material. The same key material can be [reimported](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html#reimport-key-material), but you cannot import different key material.
        Returns:
        builder

      • policy

        public ReplicaExternalKeyArgs.Builder policy​(@Nullable
                                             com.pulumi.core.Output<java.lang.String> policy)
        Parameters:
        policy - The key policy to attach to the KMS key. If you do not specify a key policy, AWS KMS attaches the [default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) to the KMS key.
        Returns:
        builder

      • policy

        public ReplicaExternalKeyArgs.Builder policy​(java.lang.String policy)
        Parameters:
        policy - The key policy to attach to the KMS key. If you do not specify a key policy, AWS KMS attaches the [default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) to the KMS key.
        Returns:
        builder

      • primaryKeyArn

        public ReplicaExternalKeyArgs.Builder primaryKeyArn​(com.pulumi.core.Output<java.lang.String> primaryKeyArn)
        Parameters:
        primaryKeyArn - The ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
        Returns:
        builder

      • primaryKeyArn

        public ReplicaExternalKeyArgs.Builder primaryKeyArn​(java.lang.String primaryKeyArn)
        Parameters:
        primaryKeyArn - The ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
        Returns:
        builder

      • tags

        public ReplicaExternalKeyArgs.Builder tags​(@Nullable
                                           com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - A map of tags to assign to the replica key. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public ReplicaExternalKeyArgs.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - A map of tags to assign to the replica key. If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • validTo

        public ReplicaExternalKeyArgs.Builder validTo​(@Nullable
                                              com.pulumi.core.Output<java.lang.String> validTo)
        Parameters:
        validTo - Time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the key becomes unusable. If not specified, key material does not expire. Valid values: [RFC3339 time string](https://tools.ietf.org/html/rfc3339#section-5.8) (`YYYY-MM-DDTHH:MM:SSZ`)
        Returns:
        builder

      • validTo

        public ReplicaExternalKeyArgs.Builder validTo​(java.lang.String validTo)
        Parameters:
        validTo - Time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the key becomes unusable. If not specified, key material does not expire. Valid values: [RFC3339 time string](https://tools.ietf.org/html/rfc3339#section-5.8) (`YYYY-MM-DDTHH:MM:SSZ`)
        Returns:
        builder