Skip to content

Latest commit

 

History

History
93 lines (72 loc) · 2.12 KB

kms.rst

File metadata and controls

93 lines (72 loc) · 2.12 KB
Raw

kms

Implemented features for this service

  • [X] cancel_key_deletion
  • [ ] connect_custom_key_store
  • [ ] create_alias
  • [ ] create_custom_key_store
  • [X] create_grant

  • [X] create_key

    The provided Policy currently does not need to be valid. If it is valid, Moto will perform authorization checks on key-related operations, just like AWS does.

    These authorization checks are quite basic for now. Moto will only throw an AccessDeniedException if the following conditions are met:
    • The principal is set to "*"
    • The resource is set to "*"
    • The Action matches describe_key
  • [X] decrypt
  • [X] delete_alias Delete the alias.
  • [ ] delete_custom_key_store
  • [ ] delete_imported_key_material
  • [ ] describe_custom_key_stores
  • [X] describe_key
  • [X] disable_key
  • [X] disable_key_rotation
  • [ ] disconnect_custom_key_store
  • [X] enable_key
  • [X] enable_key_rotation
  • [X] encrypt
  • [X] generate_data_key
  • [ ] generate_data_key_pair
  • [ ] generate_data_key_pair_without_plaintext
  • [ ] generate_data_key_without_plaintext
  • [ ] generate_mac
  • [ ] generate_random
  • [X] get_key_policy
  • [X] get_key_rotation_status
  • [ ] get_parameters_for_import
  • [X] get_public_key
  • [ ] import_key_material
  • [ ] list_aliases
  • [X] list_grants
  • [ ] list_key_policies
  • [ ] list_key_rotations
  • [X] list_keys
  • [X] list_resource_tags
  • [X] list_retirable_grants
  • [X] put_key_policy
  • [X] re_encrypt
  • [X] replicate_key
  • [X] retire_grant
  • [X] revoke_grant
  • [ ] rotate_key_on_demand
  • [X] schedule_key_deletion

  • [X] sign

    Sign message using generated private key.

    • grant_tokens are not implemented
  • [X] tag_resource
  • [X] untag_resource
  • [ ] update_alias
  • [ ] update_custom_key_store
  • [X] update_key_description
  • [ ] update_primary_region

  • [X] verify

    Verify message using public key from generated private key.

    • grant_tokens are not implemented
    • The MessageType-parameter DIGEST is not yet implemented
  • [ ] verify_mac