aws-kms-data-key-plaintext-output
GenerateDataKey deliberately returns a plaintext data-encryption key alongside its encrypted copy.
Where it sits
| location | GenerateDataKey.Plaintext |
|---|
| location kind | output_value |
|---|
| data kinds | encryption_key_material credential |
|---|
| emits edge | ExposesCredential |
|---|
| service | KMS (aws:kms) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | GenerateDataKey |
|---|
| response path | Plaintext |
|---|
| encoding | binary |
|---|
| params | {"KeyId": "\u003ckey-id\u003e", "KeySpec": "AES_256"} |
|---|
Required permissions
References