AWS Key Management Service
AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications. AWS KMS is a secure and resilient service that uses hardware security modules that have been validated under FIPS 140-2, or are in the process of being validated, to protect your keys. AWS KMS is integrated with AWS CloudTrail to provide you with logs of all key usage to help meet your regulatory and compliance needs.
Below are the cmdlets which are available with AWS Key Management Service
CmdletName | ServiceOperation |
Add-KMSResourceTag | TagResource |
Connect-KMSCustomKeyStore | ConnectCustomKeyStore |
Disable-KMSGrant | RetireGrant |
Disable-KMSKey | DisableKey |
Disable-KMSKeyRotation | DisableKeyRotation |
Disconnect-KMSCustomKeyStore | DisconnectCustomKeyStore |
Enable-KMSKey | EnableKey |
Enable-KMSKeyRotation | EnableKeyRotation |
Get-KMSAliasList | ListAliases |
Get-KMSCustomKeyStore | DescribeCustomKeyStores |
Get-KMSGrantList | ListGrants |
Get-KMSKey | DescribeKey |
Get-KMSKeyList | ListKeys |
Get-KMSKeyPolicy | GetKeyPolicy |
Get-KMSKeyPolicyList | ListKeyPolicies |
Get-KMSKeyRotationStatus | GetKeyRotationStatus |
Get-KMSParametersForImport | GetParametersForImport |
Get-KMSPublicKey | GetPublicKey |
Get-KMSResourceTag | ListResourceTags |
Get-KMSRetirableGrant | ListRetirableGrants |
Import-KMSKeyMaterial | ImportKeyMaterial |
Invoke-KMSDecrypt | Decrypt |
Invoke-KMSEncrypt | Encrypt |
Invoke-KMSReEncrypt | ReEncrypt |
Invoke-KMSSigning | Sign |
New-KMSAlias | CreateAlias |
New-KMSCustomKeyStore | CreateCustomKeyStore |
New-KMSDataKey | GenerateDataKey |
New-KMSDataKeyPair | GenerateDataKeyPair |
New-KMSDataKeyPairWithoutPlaintext | GenerateDataKeyPairWithoutPlaintext |
New-KMSDataKeyWithoutPlaintext | GenerateDataKeyWithoutPlaintext |
New-KMSGrant | CreateGrant |
New-KMSKey | CreateKey |
New-KMSRandom | GenerateRandom |
Remove-KMSAlias | DeleteAlias |
Remove-KMSCustomKeyStore | DeleteCustomKeyStore |
Remove-KMSImportedKeyMaterial | DeleteImportedKeyMaterial |
Remove-KMSResourceTag | UntagResource |
Request-KMSKeyDeletion | ScheduleKeyDeletion |
Revoke-KMSGrant | RevokeGrant |
Stop-KMSKeyDeletion | CancelKeyDeletion |
Test-KMSSignature | Verify |
Update-KMSAlias | UpdateAlias |
Update-KMSCustomKeyStore | UpdateCustomKeyStore |
Update-KMSKeyDescription | UpdateKeyDescription |
Write-KMSKeyPolicy | PutKeyPolicy |
You can also check other AWS Services, and each services cmdlets we are providing.