AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
This is the response object from the CreateGrant operation.
Namespace: Amazon.KeyManagementService.Model
Assembly: AWSSDK.KeyManagementService.dll
Version: 3.x.y.z
public class CreateGrantResponse : AmazonWebServiceResponse
The CreateGrantResponse type exposes the following members
Name | Description | |
---|---|---|
![]() |
CreateGrantResponse() |
Name | Type | Description | |
---|---|---|---|
![]() |
ContentLength | System.Int64 | Inherited from Amazon.Runtime.AmazonWebServiceResponse. |
![]() |
GrantId | System.String |
Gets and sets the property GrantId. The unique identifier for the grant.
You can use the |
![]() |
GrantToken | System.String |
Gets and sets the property GrantToken. The grant token. Use a grant token when your permission to call this operation comes from a new grant that has not yet achieved eventual consistency. For more information, see Grant token and Using a grant token in the Key Management Service Developer Guide. |
![]() |
HttpStatusCode | System.Net.HttpStatusCode | Inherited from Amazon.Runtime.AmazonWebServiceResponse. |
![]() |
ResponseMetadata | Amazon.Runtime.ResponseMetadata | Inherited from Amazon.Runtime.AmazonWebServiceResponse. |
The following example creates a grant that allows the specified IAM role to encrypt data with the specified KMS key.
var client = new AmazonKeyManagementServiceClient(); var response = client.CreateGrant(new CreateGrantRequest { GranteePrincipal = "arn:aws:iam::111122223333:role/ExampleRole", // The identity that is given permission to perform the operations specified in the grant. KeyId = "arn:aws:kms:us-east-2:444455556666:key/1234abcd-12ab-34cd-56ef-1234567890ab", // The identifier of the KMS key to which the grant applies. You can use the key ID or the Amazon Resource Name (ARN) of the KMS key. Operations = new List<string> { "Encrypt", "Decrypt" } // A list of operations that the grant allows. }); string grantId = response.GrantId; // The unique identifier of the grant. string grantToken = response.GrantToken; // The grant token.
.NET:
Supported in: 8.0 and newer, Core 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5 and newer, 3.5