Viewing a CMK
This section describes how to view the information about the master key on the KMS console, including the key alias, status, ID, and creation time. The status of a CMK can be Enabled, Disabled, or Pending deletion.
Procedure
- Log in to the management console.
- Click in the upper left corner of the management console and select a region or project.
- Click . Choose .
- Check the key list. Table 1 describes the parameters.
Figure 1 Custom keys
Figure 2 Default keys
Table 1 Key list parameters Parameter
Description
Alias
Alias of a CMK
Status
Status of a CMK, which can be one of the following:
- Enabled
The CMK is enabled.
- Disabled
The CMK is disabled.
- Pending deletion
The CMK is scheduled for deletion.
- Pending import
If your CMK does not have materials, its status is Pending import.
ID
Random ID of a CMK generated during the CMK creation
NOTE:Use this ID as the value of Path if you are creating a custom policy in IAM and have selected Specify resource path for KeyId.
Creation Time
Creation time of the CMK
Key Algorithm and Usage
Key algorithm selected during key creation and its usage
Origin
Source of key material, which can be one of the following:
- External
The key is imported to the KMS from an external system.
- Key Management Service
The key is a default master key or created in KMS.
Enterprise Project
Enterprise project the CMK is used for
Operation
Operations you can perform on the CMK, such as disable, delete, import key material, or cancel deletion. You can also assign keys to projects.
- Enabled
- You can click the alias of a CMK to view its details, as shown in Figure 3.
To change the alias or description of the CMK, click next to the value of Alias or Description.
- A default master key (the alias suffix of which is /default) does not allow alias and description changes.
- The alias and description of a CMK cannot be changed if the CMK is in Pending deletion status.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.