software.amazon.jsii.JsiiObject.InitializationModeKeyProps.Builder, KeyProps.Jsii$Proxy| Modifier | Constructor and Description |
|---|---|
protected |
Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
Constructor that initializes the object based on values retrieved from the JsiiObject.
|
protected |
Jsii$Proxy(List<? extends IPrincipal> admins,
String alias,
String description,
Boolean enabled,
Boolean enableKeyRotation,
KeySpec keySpec,
KeyUsage keyUsage,
Duration pendingWindow,
PolicyDocument policy,
RemovalPolicy removalPolicy)
Constructor that initializes the object based on literal property values passed by the
KeyProps.Builder. |
| Modifier and Type | Method and Description |
|---|---|
com.fasterxml.jackson.databind.JsonNode |
$jsii$toJson() |
boolean |
equals(Object o) |
List<IPrincipal> |
getAdmins()
(experimental) A list of principals to add as key administrators to the key policy.
|
String |
getAlias()
(experimental) Initial alias to add to the key.
|
String |
getDescription()
(experimental) A description of the key.
|
Boolean |
getEnabled()
(experimental) Indicates whether the key is available for use.
|
Boolean |
getEnableKeyRotation()
(experimental) Indicates whether AWS KMS rotates the key.
|
KeySpec |
getKeySpec()
(experimental) The cryptographic configuration of the key.
|
KeyUsage |
getKeyUsage()
(experimental) The cryptographic operations for which the key can be used.
|
Duration |
getPendingWindow()
(experimental) Specifies the number of days in the waiting period before AWS KMS deletes a CMK that has been removed from a CloudFormation stack.
|
PolicyDocument |
getPolicy()
(experimental) Custom policy document to attach to the KMS key.
|
RemovalPolicy |
getRemovalPolicy()
(experimental) Whether the encryption key should be retained when it is removed from the Stack.
|
int |
hashCode() |
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSetprotected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef)
objRef - Reference to the JSII managed object.protected Jsii$Proxy(List<? extends IPrincipal> admins, String alias, String description, Boolean enabled, Boolean enableKeyRotation, KeySpec keySpec, KeyUsage keyUsage, Duration pendingWindow, PolicyDocument policy, RemovalPolicy removalPolicy)
KeyProps.Builder.public final List<IPrincipal> getAdmins()
KeyPropsKey administrators have permissions to manage the key (e.g., change permissions, revoke), but do not have permissions to use the key in cryptographic operations (e.g., encrypt, decrypt).
These principals will be added to the default key policy (if none specified), or to the specified policy (if provided).
Default: []
public final String getAlias()
KeyProps
More aliases can be added later by calling addAlias.
Default: - No alias is added for the key.
public final String getDescription()
KeyPropsUse a description that helps your users decide whether the key is appropriate for a particular task.
Default: - No description.
getDescription in interface KeyPropspublic final Boolean getEnabled()
KeyPropsDefault: - Key is enabled.
getEnabled in interface KeyPropspublic final Boolean getEnableKeyRotation()
KeyPropsDefault: false
getEnableKeyRotation in interface KeyPropspublic final KeySpec getKeySpec()
KeyPropsIMPORTANT: If you change this property of an existing key, the existing key is scheduled for deletion and a new key is created with the specified value.
Default: KeySpec.SYMMETRIC_DEFAULT
getKeySpec in interface KeyPropspublic final KeyUsage getKeyUsage()
KeyPropsIMPORTANT: If you change this property of an existing key, the existing key is scheduled for deletion and a new key is created with the specified value.
Default: KeyUsage.ENCRYPT_DECRYPT
getKeyUsage in interface KeyPropspublic final Duration getPendingWindow()
KeyPropsWhen you remove a customer master key (CMK) from a CloudFormation stack, AWS KMS schedules the CMK for deletion and starts the mandatory waiting period. The PendingWindowInDays property determines the length of waiting period. During the waiting period, the key state of CMK is Pending Deletion, which prevents the CMK from being used in cryptographic operations. When the waiting period expires, AWS KMS permanently deletes the CMK.
Enter a value between 7 and 30 days.
Default: - 30 days
getPendingWindow in interface KeyPropshttps://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-kms-key.html#cfn-kms-key-pendingwindowindayspublic final PolicyDocument getPolicy()
KeyProps
NOTE - If the @aws-cdk/aws-kms:defaultKeyPolicies feature flag is set (the default for new projects),
this policy will override the default key policy and become the only key policy for the key. If the
feature flag is not set, this policy will be appended to the default key policy.
Default: - A policy document with permissions for the account root to administer the key will be created.
public final RemovalPolicy getRemovalPolicy()
KeyPropsThis is useful when one wants to retain access to data that was encrypted with a key that is being retired.
Default: RemovalPolicy.Retain
getRemovalPolicy in interface KeyProps@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()
$jsii$toJson in interface software.amazon.jsii.JsiiSerializableCopyright © 2021. All rights reserved.