aws-kms-data-key-pair-private-output
GenerateDataKeyPair returns a plaintext private key unless the WithoutPlaintext variant is used.
Where it sits
| location | GenerateDataKeyPair.PrivateKeyPlaintext |
|---|---|
| location kind | output_value |
| data kinds | private_key encryption_key_material credential |
| emits edge | ExposesCredential |
| service | KMS (aws:kms) |
Collection recipe
| access mode | creation_response_only |
|---|---|
| operation | GenerateDataKeyPair |
| response path | PrivateKeyPlaintext |
| encoding | binary |
| params | {"KeyId": "\u003ckey-id\u003e", "KeyPairSpec": "\u003cspec\u003e"} |
Required permissions
kms:GenerateDataKeyPair