kms_generate_data_key: Generate a data encryption key for envelope encryption

In AWR.KMS: A Simple Client to the 'AWS' Key Management Service

Description

Generate a data encryption key for envelope encryption

Usage

kms_generate_data_key(key, bytes = 64L)

Arguments

key	the KMS customer master key identifier as a fully specified Amazon Resource Name (eg arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012) or an alias with the alias/ prefix (eg alias/foobar)
bytes	the required length of the data encryption key in bytes (so provide eg 64L for a 512-bit key)

Value

list of the Base64-encoded encrypted version of the data encryption key (to be stored on disk), the raw object of the encryption key and the KMS customer master key used to generate this object

References

http://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html

AWR.KMS documentation built on May 1, 2019, 10:25 p.m.