CmdID

CmdID / aws / aws kms

aws kms re-encrypt

Decrypts ciphertext and then reencrypts it entirely within KMS. AWS CLI reference

10 options Its page in the AWS CLI reference

Opens CmdID with your command. It is read in your browser and sent nowhere.

Options

10 in the AWS CLI reference
--ciphertext-blobCiphertext of the data to reencrypt.
--destination-encryption-algorithmSpecifies the encryption algorithm that KMS will use to reecrypt the data after it has decrypted it.
--destination-encryption-contextSpecifies that encryption context to use when the reencrypting the data.
--destination-key-idA unique identifier for the KMS key that is used to reencrypt the data.
--dry-run-modifiersSpecifies the modifiers to apply to the dry run operation.
--dry-runChecks if your request will succeed.
--grant-tokensA list of grant tokens.
--source-encryption-algorithmSpecifies the encryption algorithm that KMS will use to decrypt the ciphertext before it is reencrypted.
--source-encryption-contextSpecifies the encryption context to use to decrypt the ciphertext.
--source-key-idSpecifies the KMS key that KMS will use to decrypt the ciphertext before it is re-encrypted.