# KeyContextQuery

Query input for looking up a KMS Key.

Extends: KeyContextQuery
Extends: ContextLookupRoleOptions

- Source: [`node_modules/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/context-queries.d.ts`](https://github.com/aws/aws-cdk/blob/v2.274.0/packages/aws-cdk-lib/node_modules/@aws-cdk/cloud-assembly-schema/lib/cloud-assembly/context-queries.d.ts#L308)
- Type last changed: v2.160.0 · 24 Sep 2024

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { cloud_assembly_schema } from 'aws-cdk-lib';

declare const assumeRoleAdditionalOptions: any;
const keyContextQuery: cloud_assembly_schema.KeyContextQuery = {
  account: 'account',
  aliasName: 'aliasName',
  region: 'region',

  // the properties below are optional
  assumeRoleAdditionalOptions: {
    assumeRoleAdditionalOptionsKey: assumeRoleAdditionalOptions,
  },
  lookupRoleArn: 'lookupRoleArn',
  lookupRoleExternalId: 'lookupRoleExternalId',
};
```

## Properties

- `account`: string (required) — Query account.

- `aliasName`: string (required) — Alias name used to search the Key.

- `assumeRoleAdditionalOptions`: { [key: string]: any } — Additional options to pass to STS when assuming the lookup role.

  **Default:** No additional options.

  - `RoleArn` should not be used. Use the dedicated `lookupRoleArn` property instead.
  - `ExternalId` should not be used. Use the dedicated `lookupRoleExternalId` instead.

- `lookupRoleArn`: string = None — The ARN of the role that should be used to look up the missing values.

- `lookupRoleExternalId`: string — The ExternalId that needs to be supplied while assuming this role.

  **Default:** No ExternalId will be supplied

- `region`: string (required) — Query region.