Updated on 2026-03-19 GMT+08:00

Viewing a Key

This section describes how to view the information about the custom key on the KMS console, including thekey alias and the creation time. The status of a key can be Enabled, Disabled, Scheduled deletion, or Pending import.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the management console and select a region or project.
  3. Click on the left and choose Security > Data Encryption Workshop.
  1. Check the key list.Table 1 describes the parameters.

    Table 1 Key list parameters

    Parameter

    Description

    Alias/ID

    Name of a key and the random ID of a key generated during its creation.

    NOTE:

    Use this ID as the value of Path if you are creating a custom policy in IAM and have selected Specify resource path for KeyId.

    Status

    Status of a CMK, which can be one of the following:

    • Enabled

      The CMK is enabled.

    • Disabled

      The CMK is disabled.

    • Pending deletion

      The CMK is scheduled for deletion.

    • Pending import

      If your CMK does not have materials, its status is Pending import.

    Created

    Creation time of the CMK

    Origin

    Source of key material, which can be one of the following:

    • External

      The key is imported to the KMS from an external system.

    • Key Management Service

      The key is a default key or created in KMS.

    Enterprise Project

    Enterprise project the CMK is used for

  2. You can click the key alias to view its details.

    To change the alias or description of the CMK, click next to the value of Alias or Description.

    • A default key (the alias suffix of which is /default) does not allow alias and description changes.
    • The alias and description of a CMK cannot be changed if the CMK is in Pending deletion status.