Viewing a CMK

Updated on 2024-03-27 GMT+08:00

View PDF

This section describes how to view the information about the custom key on the KMS console, including the key alias, status, ID, and creation time. The status of a key can be Enabled, Disabled, Scheduled deletion, or Pending import.

Procedure

Check the key list.

**Table 1** Key list parameters
Parameter	Description
Alias/ID	Alias of a key and the random ID of a key generated during its creation. NOTE: Use this ID as the value of Path if you are creating a custom policy in IAM and have selected Specify resource path for KeyId.
Status	Status of a CMK, which can be one of the following: Enabled The CMK is enabled. Disabled The CMK is disabled. Pending deletion The CMK is scheduled for deletion. Pending import If your CMK does not have materials, its status is Pending import.
Key Algorithm and Usage	Key algorithm selected during key creation and its usage
Expiration Time	Expiration time of the key material. When the material expires, the CMK becomes an empty CMK.
Origin	Source of key material, which can be one of the following: External The key is imported to the KMS from an external system. Key Management Service The key is a default key or created in KMS.
Enterprise Project	Enterprise project the CMK is used for
Operation	Operations you can perform on the key, such as disable, delete, import key material, or cancel deletion. You can also assign keys to projects.

You can click the alias of a key to view its details.
NOTE:
To change the alias or description of the CMK, click next to the value of Alias or Description.
- A default key (the alias suffix of which is /default) does not allow alias and description changes.
- The alias and description of a CMK cannot be changed if the CMK is in Pending deletion status.