GetKeyGroup - Amazon CloudFront


Gets a key group, including the date and time when the key group was last modified.

To get a key group, you must provide the key group's identifier. If the key group is referenced in a distribution's cache behavior, you can get the key group's identifier using ListDistributions or GetDistribution. If the key group is not referenced in a cache behavior, you can get the identifier using ListKeyGroups.

Request Syntax

GET /2020-05-31/key-group/Id HTTP/1.1

URI Request Parameters

The request uses the following URI parameters.


The identifier of the key group that you are getting. To get the identifier, use ListKeyGroups.

Required: Yes

Request Body

The request does not have a request body.

Response Syntax

HTTP/1.1 200 <?xml version="1.0" encoding="UTF-8"?> <KeyGroup> <Id>string</Id> <KeyGroupConfig> <Comment>string</Comment> <Items> <PublicKey>string</PublicKey> </Items> <Name>string</Name> </KeyGroupConfig> <LastModifiedTime>timestamp</LastModifiedTime> </KeyGroup>

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in XML format by the service.


Root level tag for the KeyGroup parameters.

Required: Yes


The identifier for the key group.

Type: String


The key group configuration.

Type: KeyGroupConfig object


The date and time when the key group was last modified.

Type: Timestamp


For information about the errors that are common to all actions, see Common Errors.


A resource that was specified is not valid.

HTTP Status Code: 404

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: