software.amazon.awscdk.services.kms

Interface IKey

All Superinterfaces:

software.constructs.IConstruct, software.constructs.IDependable, IResource, software.amazon.jsii.JsiiSerializable

All Known Subinterfaces:

IAlias, IAlias.Jsii$Default, IKey.Jsii$Default

All Known Implementing Classes:

Alias, IAlias.Jsii$Proxy, IKey.Jsii$Proxy, Key

@Generated(value="jsii-pacmak/1.63.2 (build a8a8833)",
           date="2022-08-08T20:48:14.584Z")
 @Stability(value=Stable)
public interface IKey
extends software.amazon.jsii.JsiiSerializable, IResource

A KMS Key, either managed by this CDK app, or imported.

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static interface	IKey.Jsii$Default Internal default implementation for IKey.
static class	IKey.Jsii$Proxy A proxy class which represents a concrete javascript instance of this type.

Method Summary

Modifier and Type	Method and Description
Alias	addAlias(String alias) Defines a new alias for the key.
AddToResourcePolicyResult	addToResourcePolicy(PolicyStatement statement) Adds a statement to the KMS key resource policy.
AddToResourcePolicyResult	addToResourcePolicy(PolicyStatement statement, Boolean allowNoOp) Adds a statement to the KMS key resource policy.
String	getKeyArn() The ARN of the key.
String	getKeyId() The ID of the key (the part that looks something like: 1234abcd-12ab-34cd-56ef-1234567890ab).
Grant	grant(IGrantable grantee, String... actions) Grant the indicated permissions on this key to the given principal.
Grant	grantDecrypt(IGrantable grantee) Grant decryption permissions using this key to the given principal.
Grant	grantEncrypt(IGrantable grantee) Grant encryption permissions using this key to the given principal.
Grant	grantEncryptDecrypt(IGrantable grantee) Grant encryption and decryption permissions using this key to the given principal.

Methods inherited from interface software.amazon.awscdk.IResource

applyRemovalPolicy, getEnv, getStack

Methods inherited from interface software.constructs.IConstruct

getNode

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getKeyArn

@Stability(value=Stable)
 @NotNull
String getKeyArn()

The ARN of the key.

getKeyId

@Stability(value=Stable)
 @NotNull
String getKeyId()

The ID of the key (the part that looks something like: 1234abcd-12ab-34cd-56ef-1234567890ab).

addAlias

@Stability(value=Stable)
 @NotNull
Alias addAlias(@NotNull
                                                  String alias)

Defines a new alias for the key.

Parameters:

alias - This parameter is required.

addToResourcePolicy

@Stability(value=Stable)
 @NotNull
AddToResourcePolicyResult addToResourcePolicy(@NotNull
                                                                                 PolicyStatement statement,
                                                                                 @Nullable
                                                                                 Boolean allowNoOp)

Adds a statement to the KMS key resource policy.

Parameters:

statement - The policy statement to add. This parameter is required.

allowNoOp - If this is set to `false` and there is no policy defined (i.e. external key), the operation will fail. Otherwise, it will no-op.

addToResourcePolicy

@Stability(value=Stable)
 @NotNull
AddToResourcePolicyResult addToResourcePolicy(@NotNull
                                                                                 PolicyStatement statement)

Adds a statement to the KMS key resource policy.

Parameters:

statement - The policy statement to add. This parameter is required.

grant

@Stability(value=Stable)
 @NotNull
Grant grant(@NotNull
                                               IGrantable grantee,
                                               @NotNull
                                               String... actions)

Grant the indicated permissions on this key to the given principal.

Parameters:

grantee - This parameter is required.

actions - This parameter is required.

grantDecrypt

@Stability(value=Stable)
 @NotNull
Grant grantDecrypt(@NotNull
                                                      IGrantable grantee)

Grant decryption permissions using this key to the given principal.

Parameters:

grantee - This parameter is required.

grantEncrypt

@Stability(value=Stable)
 @NotNull
Grant grantEncrypt(@NotNull
                                                      IGrantable grantee)

Grant encryption permissions using this key to the given principal.

Parameters:

grantee - This parameter is required.

grantEncryptDecrypt

@Stability(value=Stable)
 @NotNull
Grant grantEncryptDecrypt(@NotNull
                                                             IGrantable grantee)

Grant encryption and decryption permissions using this key to the given principal.

Parameters:

grantee - This parameter is required.