aws-kms-random-bytes-output
GenerateRandom returns raw random bytes that callers often adopt as passwords, keys, or signing secrets.
Where it sits
| location | GenerateRandom.Plaintext |
|---|
| location kind | output_value |
|---|
| data kinds | encryption_key_material signing_secret credential |
|---|
| emits edge | ExposesCredential |
|---|
| service | KMS (aws:kms) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | GenerateRandom |
|---|
| response path | Plaintext |
|---|
| encoding | binary |
|---|
| params | {"NumberOfBytes": "\u003c1-1024\u003e"} |
|---|
Required permissions
References