Reviewed-by: Belejkanic, Lukas <lukas.belejkanic@t-systems.com> Co-authored-by: Li, Qiao <qiaoli@huawei.com> Co-committed-by: Li, Qiao <qiaoli@huawei.com>
17 KiB
API Overview
You can use all functions of by calling its APIs.
Key Management APIs
API |
Description |
---|---|
Creates a CMK. |
|
Enables a CMK. Only an enabled CMK can be used. |
|
Disables a CMK. A disabled CMK cannot be used. |
|
Schedules the deletion of a specific key. The deletion can be scheduled 7 to 1096 days in advance. After a key is deleted, the data encrypted using the key cannot be decrypted. |
|
Cancels a scheduled deletion of a key. Once the deletion is cancelled, the key can be used. |
|
Queries the list of all CMKs. |
|
Queries details of a specified key. |
|
Generates a 512-bit random number. |
|
Creates a DEK. A returned result includes the plaintext and the ciphertext of a DEK. |
|
Creates a plaintext-free DEK, that is, the returned result of this API includes only the ciphertext of the DEK. |
|
Uses a specified CMK to encrypt a DEK. |
|
Uses a specified CMK to decrypt a DEK. |
|
Obtains the number of created CMKs, excluding the default master keys. |
|
Queries the total quota of CMKs available and the usage information, excluding the default master keys. |
|
Changes the alias of a CMK. |
|
Changes the description of a CMK. |
|
Grants a user the permissions required for operating a specific key. |
|
Revokes the key operation permissions granted to a user. |
|
Retires the granted key operation permissions. |
|
Queries grants of a CMK. |
|
Queries grants that can be retired. |
|
Obtains necessary parameters to import a key, including an import token and an encryption public key. |
|
Imports the key material of a specified key. |
|
Deletes the key material of a specified key. |
|
Uses the tag filtering function to query the detailed information of a CMK. |
|
Queries tags of a CMK. |
|
Queries all tag sets of a project. |
|
Adds or deletes CMK tags in a batch. |
|
Adds a tag to a CMK. |
|
Deletes a tag from a CMK. |
|
- |
|
- |