Options
All
  • Public
  • Public/Protected
  • All
Menu

Class KeyConfig

SecurityConfig / KeyManagementServiceConfig / KeyConfig

AWS KMS Key configuration

example
- name: ExampleKey
  deploymentTargets:
    organizationalUnits:
      - Root
  alias: alias/example/key
  policy: path/to/policy.json
  description: Example KMS key
  enabled: true
  enableKeyRotation: true
  removalPolicy: retain

Hierarchy

  • KeyConfig

Implements

Index

Constructors

Properties

Constructors

constructor

Properties

Readonly alias

alias: "" = ''

Initial alias to add to the key

Readonly deploymentTargets

deploymentTargets: DeploymentTargets = ...

KMS key deployment target.

To deploy KMS key into Root and Infrastructure organizational units, you need to provide below value for this parameter.

example
- deploymentTargets:
        organizationalUnits:
          - Root
          - Infrastructure

Readonly description

description: "" = ''

A description of the key.

Readonly enableKeyRotation

enableKeyRotation: true = true

Indicates whether AWS KMS rotates the key.

default

true

Readonly enabled

enabled: true = true

Indicates whether the key is available for use.

default
  • Key is enabled.

Readonly name

name: "" = ''

Unique Key name for logical reference

Readonly policy

policy: "" = ''

Key policy file path. This file must be available in accelerator config repository.

Readonly removalPolicy

removalPolicy: "retain" = 'retain'

Whether the encryption key should be retained when it is removed from the Stack.

default

retain

Generated using TypeDoc