CmdID

CmdID / aws / aws kms

aws kms generate-data-key-pair

Returns a unique asymmetric data key pair for use outside of KMS. AWS CLI reference

6 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

6 in the AWS CLI reference
--dry-runChecks if your request will succeed.
--encryption-contextSpecifies the encryption context that will be used when encrypting the private key in the data key pair.
--grant-tokensA list of grant tokens.
--key-idSpecifies the symmetric encryption KMS key that encrypts the private key in the data key pair.
--key-pair-specDetermines the type of data key pair that is generated.
--recipientA signed attestation document from an Amazon Web Services Nitro enclave or NitroTPM, and the encryption algorithm to use with the public key in the attestation document.