Back to AWS KMS Programming Languages Index

Python AWS KMS REST API Examples

Create Key
Creates a customer master key (CMK) in the caller's AWS account.

List Keys
Gets a list of all customer master keys (CMKs) in the caller's AWS account and region.

Create Grant
Adds a grant to a customer master key (CMK). The grant specifies who can use the CMK and under what conditions. When setting permissions, grants are an alternative to key policies.

Create Alias
Creates a display name for a customer master key (CMK). You can use an alias to identify a CMK in selected operations, such as Encrypt and GenerateDataKey.

List Aliases
Gets a list of all aliases in the caller's AWS account and region.

List Grants
Gets a list of all grants for the specified customer master key (CMK).

Delete Alias
Deletes the specified alias.

Disable Key
Sets the state of a customer master key (CMK) to disabled, thereby preventing its use for cryptographic operations.

Encrypt
Encrypts plaintext into ciphertext by using a customer master key (CMK). The Encrypt operation has two primary use cases: You can encrypt up to 4 kilobytes (4096 bytes) of arbitrary data such as an RSA key, a database password, or other sensitive information.

Decrypt
Decrypts ciphertext. Ciphertext is plaintext that has been previously encrypted.