oci.Kms.getKeys

func GetKeys(ctx *Context, args *GetKeysArgs, opts ...InvokeOption) (*GetKeysResult, error)
func GetKeysOutput(ctx *Context, args *GetKeysOutputArgs, opts ...InvokeOption) GetKeysResultOutput

> Note: This function is named GetKeys in the Go SDK.

CompartmentId string

The OCID of the compartment.

ManagementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

CurveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

Filters List<GetKeysFilter>

Length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

ProtectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

CompartmentId string

The OCID of the compartment.

ManagementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

CurveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

Filters []GetKeysFilter

Length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

ProtectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId String

The OCID of the compartment.

managementEndpoint String

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId String

The curve ID of the keys. (This pertains only to ECDSA keys.)

filters List<GetKeysFilter>

length Integer

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

protectionMode String

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId string

The OCID of the compartment.

managementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

filters GetKeysFilter[]

length number

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

protectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartment_id str

The OCID of the compartment.

management_endpoint str

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

algorithm str

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curve_id str

The curve ID of the keys. (This pertains only to ECDSA keys.)

filters Sequence[kms.GetKeysFilter]

length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

protection_mode str

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId String

The OCID of the compartment.

managementEndpoint String

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId String

The curve ID of the keys. (This pertains only to ECDSA keys.)

filters List<Property Map>

length Number

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

protectionMode String

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

CompartmentId string

The OCID of the compartment that contains this master encryption key.

Id string

The provider-assigned unique ID for this managed resource.

Keys List<GetKeysKey>

The list of keys.

ManagementEndpoint string

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

CurveId string

Supported curve IDs for ECDSA keys.

Filters List<GetKeysFilter>

Length int

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

ProtectionMode string

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

CompartmentId string

The OCID of the compartment that contains this master encryption key.

Id string

The provider-assigned unique ID for this managed resource.

Keys []GetKeysKey

The list of keys.

ManagementEndpoint string

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

CurveId string

Supported curve IDs for ECDSA keys.

Filters []GetKeysFilter

Length int

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

ProtectionMode string

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId String

The OCID of the compartment that contains this master encryption key.

id String

The provider-assigned unique ID for this managed resource.

keys List<GetKeysKey>

The list of keys.

managementEndpoint String

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

curveId String

Supported curve IDs for ECDSA keys.

filters List<GetKeysFilter>

length Integer

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

protectionMode String

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId string

The OCID of the compartment that contains this master encryption key.

id string

The provider-assigned unique ID for this managed resource.

keys GetKeysKey[]

The list of keys.

managementEndpoint string

algorithm string

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

curveId string

Supported curve IDs for ECDSA keys.

filters GetKeysFilter[]

length number

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

protectionMode string

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartment_id str

The OCID of the compartment that contains this master encryption key.

id str

The provider-assigned unique ID for this managed resource.

keys Sequence[kms.GetKeysKey]

The list of keys.

management_endpoint str

algorithm str

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

curve_id str

Supported curve IDs for ECDSA keys.

filters Sequence[kms.GetKeysFilter]

length int

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

protection_mode str

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

compartmentId String

The OCID of the compartment that contains this master encryption key.

id String

The provider-assigned unique ID for this managed resource.

keys List<Property Map>

The list of keys.

managementEndpoint String

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt. Only AES algorithm is supported for External keys.

curveId String

Supported curve IDs for ECDSA keys.

filters List<Property Map>

length Number

The length of the key in bytes, expressed as an integer. Supported values include the following:

• AES: 16, 24, or 32
• RSA: 256, 384, or 512
• ECDSA: 32, 48, or 66

protectionMode String

The key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. By default, a key's protection mode is set to HSM. You can't change a key's protection mode after the key is created or imported. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

Name string

Values List<string>

Regex bool

Name string

Values []string

Regex bool

name String

values List<String>

regex Boolean

name string

values string[]

regex boolean

name str

values Sequence[str]

regex bool

name String

values List<String>

regex Boolean

AutoKeyRotationDetails List<GetKeysKeyAutoKeyRotationDetail>

The details of auto rotation schedule for the Key being create updated or imported.

CompartmentId string

The OCID of the compartment.

CurrentKeyVersion string

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

DefinedTags Dictionary<string, string>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

DesiredState string

DisplayName string

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

ExternalKeyReferenceDetails List<GetKeysKeyExternalKeyReferenceDetail>

Key reference data to be returned to the customer as a response.

ExternalKeyReferences List<GetKeysKeyExternalKeyReference>

FreeformTags Dictionary<string, string>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

Id string

The OCID of the key.

IsAutoRotationEnabled bool

A parameter specifying whether the auto key rotation is enabled or not.

IsPrimary bool

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

KeyShapes List<GetKeysKeyKeyShape>

The cryptographic properties of a key.

ManagementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

ProtectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

ReplicaDetails List<GetKeysKeyReplicaDetail>

Key replica details

RestoreFromFiles List<GetKeysKeyRestoreFromFile>

RestoreFromObjectStores List<GetKeysKeyRestoreFromObjectStore>

RestoreTrigger bool

RestoredFromKeyId string

State string

The key's current lifecycle state. Example: ENABLED

TimeCreated string

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

TimeOfDeletion string

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

VaultId string

The OCID of the vault that contains this key.

AutoKeyRotationDetails []GetKeysKeyAutoKeyRotationDetail

The details of auto rotation schedule for the Key being create updated or imported.

CompartmentId string

The OCID of the compartment.

CurrentKeyVersion string

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

DefinedTags map[string]string

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

DesiredState string

DisplayName string

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

ExternalKeyReferenceDetails []GetKeysKeyExternalKeyReferenceDetail

Key reference data to be returned to the customer as a response.

ExternalKeyReferences []GetKeysKeyExternalKeyReference

FreeformTags map[string]string

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

Id string

The OCID of the key.

IsAutoRotationEnabled bool

A parameter specifying whether the auto key rotation is enabled or not.

IsPrimary bool

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

KeyShapes []GetKeysKeyKeyShape

The cryptographic properties of a key.

ManagementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

ProtectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

ReplicaDetails []GetKeysKeyReplicaDetail

Key replica details

RestoreFromFiles []GetKeysKeyRestoreFromFile

RestoreFromObjectStores []GetKeysKeyRestoreFromObjectStore

RestoreTrigger bool

RestoredFromKeyId string

State string

The key's current lifecycle state. Example: ENABLED

TimeCreated string

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

TimeOfDeletion string

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

VaultId string

The OCID of the vault that contains this key.

autoKeyRotationDetails List<GetKeysKeyAutoKeyRotationDetail>

The details of auto rotation schedule for the Key being create updated or imported.

compartmentId String

The OCID of the compartment.

currentKeyVersion String

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

definedTags Map<String,String>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

desiredState String

displayName String

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

externalKeyReferenceDetails List<GetKeysKeyExternalKeyReferenceDetail>

Key reference data to be returned to the customer as a response.

externalKeyReferences List<GetKeysKeyExternalKeyReference>

freeformTags Map<String,String>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

id String

The OCID of the key.

isAutoRotationEnabled Boolean

A parameter specifying whether the auto key rotation is enabled or not.

isPrimary Boolean

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

keyShapes List<GetKeysKeyKeyShape>

The cryptographic properties of a key.

managementEndpoint String

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

protectionMode String

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

replicaDetails List<GetKeysKeyReplicaDetail>

Key replica details

restoreFromFiles List<GetKeysKeyRestoreFromFile>

restoreFromObjectStores List<GetKeysKeyRestoreFromObjectStore>

restoreTrigger Boolean

restoredFromKeyId String

state String

The key's current lifecycle state. Example: ENABLED

timeCreated String

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

timeOfDeletion String

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

vaultId String

The OCID of the vault that contains this key.

autoKeyRotationDetails GetKeysKeyAutoKeyRotationDetail[]

The details of auto rotation schedule for the Key being create updated or imported.

compartmentId string

The OCID of the compartment.

currentKeyVersion string

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

definedTags {[key: string]: string}

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

desiredState string

displayName string

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

externalKeyReferenceDetails GetKeysKeyExternalKeyReferenceDetail[]

Key reference data to be returned to the customer as a response.

externalKeyReferences GetKeysKeyExternalKeyReference[]

freeformTags {[key: string]: string}

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

id string

The OCID of the key.

isAutoRotationEnabled boolean

A parameter specifying whether the auto key rotation is enabled or not.

isPrimary boolean

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

keyShapes GetKeysKeyKeyShape[]

The cryptographic properties of a key.

managementEndpoint string

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

protectionMode string

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

replicaDetails GetKeysKeyReplicaDetail[]

Key replica details

restoreFromFiles GetKeysKeyRestoreFromFile[]

restoreFromObjectStores GetKeysKeyRestoreFromObjectStore[]

restoreTrigger boolean

restoredFromKeyId string

state string

The key's current lifecycle state. Example: ENABLED

timeCreated string

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

timeOfDeletion string

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

vaultId string

The OCID of the vault that contains this key.

auto_key_rotation_details Sequence[kms.GetKeysKeyAutoKeyRotationDetail]

The details of auto rotation schedule for the Key being create updated or imported.

compartment_id str

The OCID of the compartment.

current_key_version str

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

defined_tags Mapping[str, str]

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

desired_state str

display_name str

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

external_key_reference_details Sequence[kms.GetKeysKeyExternalKeyReferenceDetail]

Key reference data to be returned to the customer as a response.

external_key_references Sequence[kms.GetKeysKeyExternalKeyReference]

freeform_tags Mapping[str, str]

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

id str

The OCID of the key.

is_auto_rotation_enabled bool

A parameter specifying whether the auto key rotation is enabled or not.

is_primary bool

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

key_shapes Sequence[kms.GetKeysKeyKeyShape]

The cryptographic properties of a key.

management_endpoint str

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

protection_mode str

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

replica_details Sequence[kms.GetKeysKeyReplicaDetail]

Key replica details

restore_from_files Sequence[kms.GetKeysKeyRestoreFromFile]

restore_from_object_stores Sequence[kms.GetKeysKeyRestoreFromObjectStore]

restore_trigger bool

restored_from_key_id str

state str

The key's current lifecycle state. Example: ENABLED

time_created str

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

time_of_deletion str

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

vault_id str

The OCID of the vault that contains this key.

autoKeyRotationDetails List<Property Map>

The details of auto rotation schedule for the Key being create updated or imported.

compartmentId String

The OCID of the compartment.

currentKeyVersion String

The OCID of the key version used in cryptographic operations. During key rotation, the service might be in a transitional state where this or a newer key version are used intermittently. The currentKeyVersion property is updated when the service is guaranteed to use the new key version for all subsequent encryption operations.

definedTags Map<String>

Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}

desiredState String

displayName String

A user-friendly name for the key. It does not have to be unique, and it is changeable. Avoid entering confidential information.

externalKeyReferenceDetails List<Property Map>

Key reference data to be returned to the customer as a response.

externalKeyReferences List<Property Map>

freeformTags Map<String>

Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}

id String

The OCID of the key.

isAutoRotationEnabled Boolean

A parameter specifying whether the auto key rotation is enabled or not.

isPrimary Boolean

A Boolean value that indicates whether the Key belongs to primary Vault or replica vault.

keyShapes List<Property Map>

The cryptographic properties of a key.

managementEndpoint String

The service endpoint to perform management operations against. Management operations include 'Create,' 'Update,' 'List,' 'Get,' and 'Delete' operations. See Vault Management endpoint.

protectionMode String

A key's protection mode indicates how the key persists and where cryptographic operations that use the key are performed. A protection mode of HSM means that the key persists on a hardware security module (HSM) and all cryptographic operations are performed inside the HSM. A protection mode of SOFTWARE means that the key persists on the server, protected by the vault's RSA wrapping key which persists on the HSM. All cryptographic operations that use a key with a protection mode of SOFTWARE are performed on the server. A protection mode of EXTERNAL mean that the key persists on the customer's external key manager which is hosted externally outside of oracle. Oracle only hold a reference to that key. All cryptographic operations that use a key with a protection mode of EXTERNAL are performed by external key manager.

replicaDetails List<Property Map>

Key replica details

restoreFromFiles List<Property Map>

restoreFromObjectStores List<Property Map>

restoreTrigger Boolean

restoredFromKeyId String

state String

The key's current lifecycle state. Example: ENABLED

timeCreated String

The date and time the key was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z

timeOfDeletion String

An optional property indicating when to delete the key, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z

vaultId String

The OCID of the vault that contains this key.

LastRotationMessage string

The last execution status message of auto key rotation.

LastRotationStatus string

The status of last execution of auto key rotation.

RotationIntervalInDays int

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

TimeOfLastRotation string

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

TimeOfNextRotation string

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

TimeOfScheduleStart string

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

LastRotationMessage string

The last execution status message of auto key rotation.

LastRotationStatus string

The status of last execution of auto key rotation.

RotationIntervalInDays int

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

TimeOfLastRotation string

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

TimeOfNextRotation string

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

TimeOfScheduleStart string

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

lastRotationMessage String

The last execution status message of auto key rotation.

lastRotationStatus String

The status of last execution of auto key rotation.

rotationIntervalInDays Integer

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

timeOfLastRotation String

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

timeOfNextRotation String

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

timeOfScheduleStart String

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

lastRotationMessage string

The last execution status message of auto key rotation.

lastRotationStatus string

The status of last execution of auto key rotation.

rotationIntervalInDays number

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

timeOfLastRotation string

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

timeOfNextRotation string

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

timeOfScheduleStart string

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

last_rotation_message str

The last execution status message of auto key rotation.

last_rotation_status str

The status of last execution of auto key rotation.

rotation_interval_in_days int

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

time_of_last_rotation str

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

time_of_next_rotation str

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

time_of_schedule_start str

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

lastRotationMessage String

The last execution status message of auto key rotation.

lastRotationStatus String

The status of last execution of auto key rotation.

rotationIntervalInDays Number

The interval of auto key rotation. For auto key rotation the interval should between 60 day and 365 days (1 year). Note: User must specify this parameter when creating a new schedule.

timeOfLastRotation String

A property indicating Last rotation Date. Example: 2023-04-04T00:00:00Z.

timeOfNextRotation String

A property indicating Next estimated scheduled Time, as per the interval, expressed as date YYYY-MM-DD String. Example: 2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z.

timeOfScheduleStart String

A property indicating scheduled start date expressed as date YYYY-MM-DD String. Example: `2023-04-04T00:00:00Z. The time has no significance when scheduling an auto key rotation as this can be done anytime approximately the scheduled day, KMS ignores the time and replaces it with 00:00, for example 2023-04-04T15:14:13Z will be used as 2023-04-04T00:00:00Z . Note : Today’s date will be used if not specified by customer.

ExternalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

ExternalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyId String

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

external_key_id str

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyId String

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

ExternalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

ExternalKeyVersionId string

Key version ID associated with the external key.

ExternalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

ExternalKeyVersionId string

Key version ID associated with the external key.

externalKeyId String

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyVersionId String

Key version ID associated with the external key.

externalKeyId string

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyVersionId string

Key version ID associated with the external key.

external_key_id str

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

external_key_version_id str

Key version ID associated with the external key.

externalKeyId String

ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.

externalKeyVersionId String

Key version ID associated with the external key.

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

CurveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

Length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

Algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

CurveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

Length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId String

The curve ID of the keys. (This pertains only to ECDSA keys.)

length Integer

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

algorithm string

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId string

The curve ID of the keys. (This pertains only to ECDSA keys.)

length number

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

algorithm str

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curve_id str

The curve ID of the keys. (This pertains only to ECDSA keys.)

length int

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

algorithm String

The algorithm used by a key's key versions to encrypt or decrypt data. Currently, support includes AES, RSA, and ECDSA algorithms.

curveId String

The curve ID of the keys. (This pertains only to ECDSA keys.)

length Number

The length of the key in bytes, expressed as an integer. Supported values include 16, 24, or 32.

ReplicationId string

ReplicationId associated with a key operation

ReplicationId string

ReplicationId associated with a key operation

replicationId String

ReplicationId associated with a key operation

replicationId string

ReplicationId associated with a key operation

replication_id str

ReplicationId associated with a key operation

replicationId String

ReplicationId associated with a key operation

ContentLength string

ContentMd5 string

RestoreKeyFromFileDetails string

ContentLength string

ContentMd5 string

RestoreKeyFromFileDetails string

contentLength String

contentMd5 String

restoreKeyFromFileDetails String

contentLength string

contentMd5 string

restoreKeyFromFileDetails string

content_length str

content_md5 str

restore_key_from_file_details str

contentLength String

contentMd5 String

restoreKeyFromFileDetails String

Bucket string

Destination string

Namespace string

Object string

Uri string

Bucket string

Destination string

Namespace string

Object string

Uri string

bucket String

destination String

namespace String

object String

uri String

bucket string

destination string

namespace string

object string

uri string

bucket str

destination str

namespace str

object str

uri str

bucket String

destination String

namespace String

object String

uri String