Skip to content

KmsKeyConfiguration

Source code in docs_src/capo_accessanalyzer/types/kms_key_configuration.py
class KmsKeyConfiguration(TypedDict, closed=True):
    key_policies: NotRequired[
        "capo_accessanalyzer.types.kms_key_policies_map.KmsKeyPoliciesMap"
    ]
    """<p>Resource policy configuration for the KMS key. The only valid value for the name of the key policy is <code>default</code>. For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default">Default key policy</a>.</p>"""
    grants: NotRequired[
        "capo_accessanalyzer.types.kms_grant_configurations_list.KmsGrantConfigurationsList"
    ]
    """<p>A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.</p>"""

grants instance-attribute

grants: NotRequired[KmsGrantConfigurationsList]

A list of proposed grant configurations for the KMS key. If the proposed grant configuration is for an existing key, the access preview uses the proposed list of grant configurations in place of the existing grants. Otherwise, the access preview uses the existing grants for the key.

key_policies instance-attribute

key_policies: NotRequired[KmsKeyPoliciesMap]

Resource policy configuration for the KMS key. The only valid value for the name of the key policy is default. For more information, see Default key policy.