Skip to content

KmsGrantConstraints

Source code in docs_src/capo_accessanalyzer/types/kms_grant_constraints.py 
11
12
13
14
15
16
17
18
19
class KmsGrantConstraints(TypedDict, closed=True):
    encryption_context_equals: NotRequired[
        "capo_accessanalyzer.types.kms_constraints_map.KmsConstraintsMap"
    ]
    """<p>A list of key-value pairs that must match the encryption context in the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations">cryptographic operation</a> request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.</p>"""
    encryption_context_subset: NotRequired[
        "capo_accessanalyzer.types.kms_constraints_map.KmsConstraintsMap"
    ]
    """<p>A list of key-value pairs that must be included in the encryption context of the <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations">cryptographic operation</a> request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.</p>"""

encryption_context_equals instance-attribute 

encryption_context_equals: NotRequired[KmsConstraintsMap]

A list of key-value pairs that must match the encryption context in the cryptographic operation request. The grant allows the operation only when the encryption context in the request is the same as the encryption context specified in this constraint.

encryption_context_subset instance-attribute 

encryption_context_subset: NotRequired[KmsConstraintsMap]

A list of key-value pairs that must be included in the encryption context of the cryptographic operation request. The grant allows the cryptographic operation only when the encryption context in the request includes the key-value pairs specified in this constraint, although it can include additional key-value pairs.