Package com.pulumi.aws.kms

Class CustomKeyStoreArgs

  • public final class CustomKeyStoreArgs
extends com.pulumi.resources.ResourceArgs

    • Method Detail

      • cloudHsmClusterId

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> cloudHsmClusterId()
        Returns:
        Cluster ID of CloudHSM. Applies when `customKeyStoreType` is `AWS_CLOUDHSM`.

      • customKeyStoreName

        public com.pulumi.core.Output<java.lang.String> customKeyStoreName()
        Returns:
        Unique name for Custom Key Store. The following arguments are optional:

      • customKeyStoreType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> customKeyStoreType()
        Returns:
        Type of key store to create. Valid values are `AWS_CLOUDHSM` and `EXTERNAL_KEY_STORE`. If omitted, AWS will default the value to `AWS_CLOUDHSM`.

      • keyStorePassword

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> keyStorePassword()
        Returns:
        Password for the `kmsuser` of an AWS CloudHSM key store. Applies when `customKeyStoreType` is `AWS_CLOUDHSM`.

      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.

      • trustAnchorCertificate

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> trustAnchorCertificate()
        Returns:
        Certificate for an AWS CloudHSM key store. Applies when `customKeyStoreType` is `AWS_CLOUDHSM`.

      • xksProxyAuthenticationCredential

        public java.util.Optional<com.pulumi.core.Output<CustomKeyStoreXksProxyAuthenticationCredentialArgs>> xksProxyAuthenticationCredential()
        Returns:
        Authentication credential for the external key store proxy (XKS proxy). Applies when `customKeyStoreType` is `EXTERNAL_KEY_STORE`. See `xksProxyAuthenticationCredential` block below.

      • xksProxyConnectivity

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> xksProxyConnectivity()
        Returns:
        How AWS KMS communicates with the external key store proxy. Applies when `customKeyStoreType` is `EXTERNAL_KEY_STORE`.

      • xksProxyUriEndpoint

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> xksProxyUriEndpoint()
        Returns:
        Endpoint that AWS KMS uses to send requests to the external key store proxy (XKS proxy). Applies when `customKeyStoreType` is `EXTERNAL_KEY_STORE`.

      • xksProxyUriPath

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> xksProxyUriPath()
        Returns:
        Base path to the proxy APIs for this external key store. To find this value, see the documentation for your external key store proxy. Applies when `customKeyStoreType` is `EXTERNAL_KEY_STORE`.

      • xksProxyVpcEndpointServiceName

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> xksProxyVpcEndpointServiceName()
        Returns:
        Name of the Amazon VPC endpoint service for interface endpoints that is used to communicate with your external key store proxy (XKS proxy). Applies when `customKeyStoreType` is `EXTERNAL_KEY_STORE` and required when `xksProxyConnectivity` is `VPC_ENDPOINT_SERVICE`.