The alias and the key it is mapped to must be in the same AWS account and the same region.
To map an alias to a different key, call UpdateAlias.
Version: (assembly version)
public abstract CreateAliasResponse CreateAlias( String aliasName, String targetKeyId )
String that contains the display name. The name must start with the word "alias" followed by a forward slash (alias/). Aliases that begin with "alias/AWS" are reserved.
An identifier of the key for which you are creating the alias. This value cannot be another alias but can be a globally unique identifier or a fully specified ARN to a key. Key ARN Example - arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012Globally Unique Key ID Example - 12345678-1234-1234-1234-123456789012
|AlreadyExistsException||The request was rejected because it attempted to create a resource that already exists.|
|DependencyTimeoutException||The system timed out while trying to fulfill the request. The request can be retried.|
|InvalidAliasNameException||The request was rejected because the specified alias name is not valid.|
|KMSInternalException||The request was rejected because an internal exception occurred. The request can be retried.|
|KMSInvalidStateException||The request was rejected because the state of the specified resource is not valid for this request. For more information about how key state affects the use of a customer master key (CMK), go to How Key State Affects the Use of a Customer Master Key in the AWS Key Management Service Developer Guide.|
|LimitExceededException||The request was rejected because a limit was exceeded. For more information, see Limits in the AWS Key Management Service Developer Guide.|
|NotFoundException||The request was rejected because the specified entity or resource could not be found.|
Supported in: 4.5, 4.0, 3.5