AWS Key Management Service (kms)

Additions

Actions

• ListKeyRotations
  
  • Description:  Controls permission to view the list of completed key rotations for an AWS KMS key
  • Access:  List
  • Resources: 

    Name: key

    Required: Yes

  • Conditions: 

    kms:CallerAccount

    kms:ViaService

• RotateKeyOnDemand
  
  • Description:  Controls permission to invoke on-demand rotation of the cryptographic material in an AWS KMS key
  • Access:  Write
  • Resources: 

    Name: key

    Required: Yes

  • Conditions: 

    kms:CallerAccount

    kms:ViaService

Conditions

• kms:RotationPeriodInDays
  
  • Description:  Filters access to the EnableKeyRotation operation based on the value of the RotationPeriodInDays parameter in the request
  • Type:  Numeric

Updates

Actions

• EnableKeyRotation
  
  Conditions
  
  • ＋ kms:RotationPeriodInDays