CmdID

CmdID / aws / aws kms

aws kms generate-data-key

Returns a unique symmetric data key for use outside of KMS. AWS CLI reference

7 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

7 in the AWS CLI reference
--dry-runChecks if your request will succeed.
--encryption-contextSpecifies the encryption context that will be used when encrypting the data key.
--grant-tokensA list of grant tokens.
--key-idSpecifies the symmetric encryption KMS key that encrypts the data key.
--key-specSpecifies the length of the data key.
--number-of-bytesSpecifies the length of the data key in bytes.
--recipientA signed attestation document from an Amazon Web Services Nitro enclave or NitroTPM, and the encryption algorithm to use with the public key in the attestation document.