Importing CMK Material

Function

This API allows you to import CMK material.

URI

Request Message

Table 2 Request header parameters

Parameter

Mandatory

Type

Description

X-Auth-Token

Yes

String

User token. It can be obtained by calling an IAM API. The value of X-Subject-Token in the response header is the user token.

Content-Type

Yes

String

application/json

Table 3 Request parameters

Parameter

Mandatory

Type

Description

key_id

Yes

String

36-byte key ID that matches the regular expression ^[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12}$.

For example, 0d0466b0-e727-4d9c-b35d-f84bb474a37f

import_token

Yes

String

CMK import token in Base64 format that matches the regular expression ^[0-9a-zA-Z+/=]{200,6144}$

encrypted_key_material

Yes

String

Encrypted CMK material in Base64 format that matches the regular expression ^[0-9a-zA-Z+/=]{344,360}$

expiration_time

No

String

Expiration time of the key material. The value is a timestamp expressed in the number of seconds since 00:00:00 UTC on January 1, 1970. KMS will delete the key material within 24 hours after the expiration.

Example: 1550291833

sequence

No

String

A 36-byte serial number of a request message.

For example, 919c82d4-8046-4722-9094-35c3c6524cff

Response Message

None

Example

The following example describes how to import the CMK material and the import-token to the CMK whose ID is bb6a3d22-dc93-47ac-b5bd-88df7ad35f1e, and set the expiration time of the CMK material to 1521578672.

Status Codes

Table 4 lists the normal status code returned by the response.
Table 4 Status codes

Status Code

Status

Description

200

OK

Request processed successfully.

Exception status code. For details, see Status Codes.