aws kms create-key
Creates a unique customer managed KMS key in your Amazon Web Services account and Region. AWS CLI reference
11 options Its page in the AWS CLI reference
Options
--bypass-policy-lockout-safety-checkSkips ("bypasses") the key policy lockout safety check.--custom-key-store-idCreates the KMS key in the specified custom key store.--customer-master-key-specInstead, use the KeySpec parameter.--descriptionA description of the KMS key.--key-specSpecifies the type of KMS key to create.--key-usageDetermines the cryptographic operations for which you can use the KMS key.--multi-regionCreates a multi-Region primary key that you can replicate into other Amazon Web Services Regions.--originThe source of the key material for the KMS key.--policyThe key policy to attach to the KMS key.--tagsAssigns one or more tags to the KMS key.--xks-key-idIdentifies the external key that serves as key material for the KMS key in an external key store.