CmdID

CmdID / aws / aws kms

aws kms derive-shared-secret

Derives a shared secret using a key agreement algorithm. AWS CLI reference

6 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

6 in the AWS CLI reference
--dry-runChecks if your request will succeed.
--grant-tokensA list of grant tokens.
--key-agreement-algorithmSpecifies the key agreement algorithm used to derive the shared secret.
--key-idIdentifies an asymmetric NIST-standard ECC or SM2 (China Regions only) KMS key.
--public-keySpecifies the public key in your peer's NIST-standard elliptic curve (ECC) or SM2 (China Regions only) key pair.
--recipientA signed attestation document from an Amazon Web Services Nitro enclave or NitroTPM, and the encryption algorithm to use with the public key in the attestation document.