AWSKMSImportKeyMaterialRequest Class Reference

Inherits from AWSRequest : AWSModel : AWSMTLModel
Declared in AWSKMSModel.h
AWSKMSModel.m

  encryptedKeyMaterial

The encrypted key material to import. It must be encrypted with the public key that you received in the response to a previous GetParametersForImport request, using the wrapping algorithm that you specified in that request.

@property (nonatomic, strong) NSData *encryptedKeyMaterial

Declared In

AWSKMSModel.h

  expirationModel

Specifies whether the key material expires. The default is KEY_MATERIAL_EXPIRES, in which case you must include the ValidTo parameter. When this parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE, you must omit the ValidTo parameter.

@property (nonatomic, assign) AWSKMSExpirationModelType expirationModel

Declared In

AWSKMSModel.h

  importToken

The import token that you received in the response to a previous GetParametersForImport request. It must be from the same response that contained the public key that you used to encrypt the key material.

@property (nonatomic, strong) NSData *importToken

Declared In

AWSKMSModel.h

  keyId

The identifier of the CMK to import the key material into. The CMK's Origin must be EXTERNAL.

A valid identifier is the unique key ID or the Amazon Resource Name (ARN) of the CMK. Examples:

  • Unique key ID: 1234abcd-12ab-34cd-56ef-1234567890ab

  • Key ARN: arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab

@property (nonatomic, strong) NSString *keyId

Declared In

AWSKMSModel.h

  validTo

The time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the CMK becomes unusable. You must omit this parameter when the ExpirationModel parameter is set to KEY_MATERIAL_DOES_NOT_EXPIRE. Otherwise it is required.

@property (nonatomic, strong) NSDate *validTo

Declared In

AWSKMSModel.h