How Do I Authorize a Key?

Scenarios

To share an encrypted image, you need to authorize the key used for encrypting the image. This section describes how to authorize a key.

The key can only be a custom key. The default key cannot be authorized.

Prerequisites

You have confirmed the key to be authorized. (You can view KMS Key Name on the image details page).

Procedure

1. Log in to the management console and choose Security & Compliance > Data Encryption Workshop.
2. On the Custom Keys tab, click the alias of the target key to go to the key details page.
3. On the Grants tab, click Create Grant, and set the following parameters.
   • User or Account: Select Account and enter the account ID. You can obtain the account ID from My Credentials.
   • Name: Enter the name of the account to authorize.
   • Granted Operations: Decrypt Data Key and Describe Key are mandatory. Others are optional.
4. Click OK.