Network.AWS.KMS.GenerateDataKeyWithoutPlaintext

Returns a key wrapped by a customer master key without the plaintext copy of that key. To retrieve the plaintext, see GenerateDataKey.

http://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html

Request

data GenerateDataKeyWithoutPlaintext

Instances

Eq GenerateDataKeyWithoutPlaintext

Show GenerateDataKeyWithoutPlaintext

ToJSON GenerateDataKeyWithoutPlaintext

AWSRequest GenerateDataKeyWithoutPlaintext

ToQuery GenerateDataKeyWithoutPlaintext

ToHeaders GenerateDataKeyWithoutPlaintext

ToPath GenerateDataKeyWithoutPlaintext

type Rs GenerateDataKeyWithoutPlaintext = GenerateDataKeyWithoutPlaintextResponse

type Sv GenerateDataKeyWithoutPlaintext = KMS

Request constructor

generateDataKeyWithoutPlaintext

Arguments

:: Text

gdkwpKeyId

-> GenerateDataKeyWithoutPlaintext

GenerateDataKeyWithoutPlaintext constructor.

The fields accessible through corresponding lenses are:

• gdkwpEncryptionContext :: HashMap Text Text
• gdkwpGrantTokens :: [Text]
• gdkwpKeyId :: Text
• gdkwpKeySpec :: Maybe DataKeySpec
• gdkwpNumberOfBytes :: Maybe Natural

Request lenses

gdkwpEncryptionContext :: Lens' GenerateDataKeyWithoutPlaintext (HashMap Text Text)

Name:value pair that contains additional data to be authenticated during the encryption and decryption processes.

gdkwpGrantTokens :: Lens' GenerateDataKeyWithoutPlaintext [Text]

A list of grant tokens that represent grants which can be used to provide long term permissions to generate a key.

gdkwpKeyId :: Lens' GenerateDataKeyWithoutPlaintext Text

Unique identifier of the key. This can be an ARN, an alias, or a globally unique identifier.

gdkwpKeySpec :: Lens' GenerateDataKeyWithoutPlaintext (Maybe DataKeySpec)

Value that identifies the encryption algorithm and key size. Currently this can be AES_128 or AES_256.

gdkwpNumberOfBytes :: Lens' GenerateDataKeyWithoutPlaintext (Maybe Natural)

Integer that contains the number of bytes to generate. Common values are 128, 256, 512, 1024 and so on.

Response

data GenerateDataKeyWithoutPlaintextResponse

Instances

Eq GenerateDataKeyWithoutPlaintextResponse

Show GenerateDataKeyWithoutPlaintextResponse

FromJSON GenerateDataKeyWithoutPlaintextResponse

Response constructor

generateDataKeyWithoutPlaintextResponse :: GenerateDataKeyWithoutPlaintextResponse

GenerateDataKeyWithoutPlaintextResponse constructor.

The fields accessible through corresponding lenses are:

• gdkwprCiphertextBlob :: Maybe Base64
• gdkwprKeyId :: Maybe Text

Response lenses

gdkwprCiphertextBlob :: Lens' GenerateDataKeyWithoutPlaintextResponse (Maybe Base64)

Ciphertext that contains the wrapped key. You must store the blob and encryption context so that the key can be used in a future operation.

gdkwprKeyId :: Lens' GenerateDataKeyWithoutPlaintextResponse (Maybe Text)

System generated unique identifier for the key.