CmdID

CmdID / aws / aws kms

aws kms decapsulate

Recovers the shared secret that was encapsulated with the public key of an ML-KEM KMS key. AWS CLI reference

5 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

5 in the AWS CLI reference
--dry-runChecks if your request will succeed.
--encapsulation-algorithmSpecifies the key encapsulation algorithm used to recover the shared secret.
--grant-tokensA list of grant tokens.
--key-idIdentifies the asymmetric ML-KEM KMS key whose public key was used to produce the encapsulated shared secret.
--shared-secret-ciphertext-blobThe encapsulated (ciphertext) form of the shared secret to recover.