AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.
Disassociates the specified KMS key from the specified log group or from all CloudWatch Logs Insights query results in the account.
When you use DisassociateKmsKey, you specify either the logGroupName
parameter or the resourceIdentifier parameter. You can't specify both of those
parameters in the same operation.
Specify the logGroupName parameter to stop using the KMS key to encrypt future
log events ingested and stored in the log group. Instead, they will be encrypted with
the default CloudWatch Logs method. The log events that were ingested while the key
was associated with the log group are still encrypted with that key. Therefore, CloudWatch
Logs will need permissions for the key whenever that data is accessed.
Specify the resourceIdentifier parameter with the query-result resource
to stop using the KMS key to encrypt the results of all future StartQuery
operations in the account. They will instead be encrypted with the default CloudWatch
Logs method. The results from queries that ran while the key was associated with the
account are still encrypted with that key. Therefore, CloudWatch Logs will need permissions
for the key whenever that data is accessed.
It can take up to 5 minutes for this operation to take effect.
For .NET Core this operation is only available in asynchronous form. Please refer to DisassociateKmsKeyAsync.
Namespace: Amazon.CloudWatchLogs
Assembly: AWSSDK.CloudWatchLogs.dll
Version: 3.x.y.z
public abstract DisassociateKmsKeyResponse DisassociateKmsKey( DisassociateKmsKeyRequest request )
Container for the necessary parameters to execute the DisassociateKmsKey service method.
| Exception | Condition |
|---|---|
| InvalidParameterException | A parameter is specified incorrectly. |
| OperationAbortedException | Multiple concurrent requests to update the same resource were in conflict. |
| ResourceNotFoundException | The specified resource does not exist. |
| ServiceUnavailableException | The service cannot complete the request. |
.NET Framework:
Supported in: 4.5, 4.0, 3.5