key_material: Put/Delete KMS Key Material

In aws.kms: 'AWS Key Management Service' Client Package

Description

Manage key material for “external” keys.

Usage

put_kms_material(key, material, token, expires = TRUE, valid_to = NULL, ...)

delete_kms_material(key, ...)

get_material_parameters(
  key,
  algorithm = c("RSAES_PKCS1_V1_5", "RSAES_OAEP_SHA_1", "RSAES_OAEP_SHA_256"),
  spec = "RSA_2048",
  ...
)

Arguments

key	A character string specifying a key ID, Amazon Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix it with “alias/”.
material	A character string specifying the base64-encoded key material (encrypted according to parameters returned by get_material_parameters).
token	A character string returned in get_material_parameters()$ImportToken.
expires	Optionally, a logical indicating whether the key material expires. If TRUE (the default), valid_to is required.
valid_to	Optionally (if expires = TRUE), a number specifying when the key material expires.
...	Additional arguments passed to kmsHTTP.
algorithm	A character string specifying an encryption algorithm used to encrypt the key material.
spec	Ignored.

Details

put_kms_material adds key material to an “external” KMS key, which can be created using create_kms_key. The import requires delete_kms_material deletes the imported material (but not the key itself).

References

https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-encrypt-key-material.html

See Also

create_kms_key

aws.kms documentation built on April 14, 2020, 5:16 p.m.