Returns information about all grants in the Amazon Web Services account and Region that have the specified retiring principal.
You can specify any principal in your Amazon Web Services account. The grants that are returned include grants for KMS keys in your Amazon Web Services account and other Amazon Web Services accounts. You might use this operation to determine which grants you may retire. To retire a grant, use the RetireGrant
For detailed information about grants, including grant terminology, see Grants in KMS
in the Key Management Service Developer Guide
. For examples of working with grants in several programming languages, see Programming grants
. Cross-account use
: You must specify a principal in your Amazon Web Services account. However, this operation can return grants in any Amazon Web Services account. You do not need
permission (or any other additional permission) in any Amazon Web Services account other than your own. Required permissions
(IAM policy) in your Amazon Web Services account. Related operations:
This cmdlet automatically pages all available results to the pipeline - parameters related to iteration are only needed if you want to manually control the paginated output. To disable autopagination, use -NoAutoIteration.