AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Disassociates the specified KMS key from the specified log group or from all CloudWatch Logs Insights query results in the account.
When you use DisassociateKmsKey, you specify either the logGroupName
parameter or the resourceIdentifier parameter. You can't specify both of those
parameters in the same operation.
Specify the logGroupName parameter to stop using the KMS key to encrypt future
log events ingested and stored in the log group. Instead, they will be encrypted with
the default CloudWatch Logs method. The log events that were ingested while the key
was associated with the log group are still encrypted with that key. Therefore, CloudWatch
Logs will need permissions for the key whenever that data is accessed.
Specify the resourceIdentifier parameter with the query-result resource
to stop using the KMS key to encrypt the results of all future StartQuery
operations in the account. They will instead be encrypted with the default CloudWatch
Logs method. The results from queries that ran while the key was associated with the
account are still encrypted with that key. Therefore, CloudWatch Logs will need permissions
for the key whenever that data is accessed.
It can take up to 5 minutes for this operation to take effect.
This is an asynchronous operation using the standard naming convention for .NET 4.5 or higher. For .NET 3.5 the operation is implemented as a pair of methods using the standard naming convention of BeginDisassociateKmsKey and EndDisassociateKmsKey.
Namespace: Amazon.CloudWatchLogs
Assembly: AWSSDK.CloudWatchLogs.dll
Version: 3.x.y.z
public abstract Task<DisassociateKmsKeyResponse> DisassociateKmsKeyAsync( DisassociateKmsKeyRequest request, CancellationToken cancellationToken )
Container for the necessary parameters to execute the DisassociateKmsKey service method.
A cancellation token that can be used by other objects or threads to receive notice of cancellation.
| Exception | Condition |
|---|---|
| InvalidParameterException | A parameter is specified incorrectly. |
| OperationAbortedException | Multiple concurrent requests to update the same resource were in conflict. |
| ResourceNotFoundException | The specified resource does not exist. |
| ServiceUnavailableException | The service cannot complete the request. |
.NET Core App:
Supported in: 3.1
.NET Standard:
Supported in: 2.0
.NET Framework:
Supported in: 4.5