A kms key can help user to protect data security in the transmission process.

Example Usage

Basic Usage

resource "alicloud_kms_key" "key" {
  description = "Hello KMS"
  deletion_window_in_days = "7"
  is_enabled = true

Argument Reference

The following arguments are supported:

  • description - (Optional) The description of the key as viewed in Alicloud console. Default to "From Terraform".
  • key_usage - (Optional) Specifies the usage of CMK. Currently, default to 'ENCRYPT/DECRYPT', indicating that CMK is used for encryption and decryption.
  • deletion_window_in_days - (Optional) Duration in days after which the key is deleted after destruction of the resource, must be between 7 and 30 days. Defaults to 30 days.
  • is_enabled - (Optional) Specifies whether the key is enabled. Defaults to true.

Attributes Reference


KMS key can be imported using the id, e.g.

$ terraform import alicloud_kms_key.example abc123456

© 2018 HashiCorpLicensed under the MPL 2.0 License.