加密密钥管理
权限 | 对应API接口 | 授权项(Action) | 依赖的授权项 | IAM项目 (Project) | 企业项目 (Enterprise Project) |
|---|---|---|---|---|---|
创建密钥 | POST /v1.0/{project_id}/kms/create-key | kms:cmk:create | - | √ | √ |
启用密钥 | POST /v1.0/{project_id}/kms/enable-key | kms:cmk:enable | - | √ | √ |
禁用密钥 | POST /v1.0/{project_id}/kms/disable-key | kms:cmk:disable | - | √ | √ |
计划删除密钥 | POST /v1.0/{project_id}/kms/schedule-key-deletion | kms:cmk:update | - | √ | √ |
取消计划删除密钥 | POST /v1.0/{project_id}/kms/cancel-key-deletion | kms:cmk:update | - | √ | √ |
查询密钥列表 | POST /v1.0/{project_id}/kms/list-keys | kms:cmk:list | - | √ | √ |
查询密钥信息 | POST /v1.0/{project_id}/kms/describe-key | kms:cmk:get | - | √ | √ |
创建随机数 | POST /v1.0/{project_id}/kms/gen-random | kms:cmk:generate | - | √ | √ |
创建数据密钥 | POST /v1.0/{project_id}/kms/create-datakey | kms:dek:create | - | √ | √ |
创建不含明文数据密钥 | POST /v1.0/{project_id}/kms/create-datakey-without-plaintext | kms:dek:create | - | √ | √ |
加密数据密钥 | POST /v1.0/{project_id}/kms/encrypt-datakey | kms:dek:crypto | - | √ | √ |
解密数据密钥 | POST /v1.0/{project_id}/kms/decrypt-datakey | kms:dek:crypto | - | √ | √ |
查询实例数 | GET /v1.0/{project_id}/kms/user-instances | kms:cmk:getInstance | - | √ | √ |
查询配额 | GET /v1.0/{project_id}/kms/user-quotas | kms:cmk:getQuota | - | √ | √ |
修改密钥别名 | POST /v1.0/{project_id}/kms/update-key-alias | kms:cmk:update | - | √ | √ |
修改密钥描述 | POST /v1.0/{project_id}/kms/update-key-description | kms:cmk:update | - | √ | √ |
加密数据 | POST /v1.0/{project_id}/kms/encrypt-data | kms:cmk:crypto | - | √ | √ |
解密数据 | POST /v1.0/{project_id}/kms/decrypt-data | kms:cmk:crypto | - | √ | √ |
获取密钥导入参数 | POST /v1.0/{project_id}/kms/get-parameters-for-import | kms:cmk:getMaterial | - | √ | √ |
导入密钥材料 | POST /v1.0/{project_id}/kms/import-key-material | kms:cmk:importMaterial | - | √ | √ |
删除密钥材料 | POST /v1.0/{project_id}/kms/delete-imported-key-material | kms:cmk:deleteMaterial | - | √ | √ |
查询密钥实例 | POST /v1.0/{project_id}/kms/resource_instances/action | kms:cmkTag:listInstance | - | √ | √ |
查询密钥标签 | GET /v1.0/{project_id}/kms/{key_id}/tags | kms:cmkTag:list | - | √ | √ |
查询项目标签 | GET /v1.0/{project_id}/kms/tags | kms:cmkTag:list | - | √ | √ |
批量添加删除密钥标签 | POST /v1.0/{project_id}/kms/{key_id}/tags/action | kms:cmkTag:batch | - | √ | √ |
添加密钥标签 | POST /v1.0/{project_id}/kms/{key_id}/tags | kms:cmkTag:create | - | √ | √ |
删除密钥标签 | POST /v1.0/{project_id}/kms/{ key_id }/tags/{key} | kms:cmkTag:delete | - | √ | √ |

