Package com.pulumi.aws.kms

Class KmsFunctions

  • public final class KmsFunctions
extends java.lang.Object

    • Constructor Detail

      • KmsFunctions

        public KmsFunctions()

    • Method Detail

      • getAlias

        public static com.pulumi.core.Output<GetAliasResult> getAlias​(GetAliasArgs args)
        Use this data source to get the ARN of a KMS key alias. By using this data source, you can reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetAliasArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var s3 = KmsFunctions.getAlias(GetAliasArgs.builder()
             .name("alias/aws/s3")
             .build());
 
     }
 }

      • getAliasPlain

        public static java.util.concurrent.CompletableFuture<GetAliasResult> getAliasPlain​(GetAliasPlainArgs args)
        Use this data source to get the ARN of a KMS key alias. By using this data source, you can reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetAliasArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var s3 = KmsFunctions.getAlias(GetAliasArgs.builder()
             .name("alias/aws/s3")
             .build());
 
     }
 }

      • getAlias

        public static com.pulumi.core.Output<GetAliasResult> getAlias​(GetAliasArgs args,
                                                              com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the ARN of a KMS key alias. By using this data source, you can reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetAliasArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var s3 = KmsFunctions.getAlias(GetAliasArgs.builder()
             .name("alias/aws/s3")
             .build());
 
     }
 }

      • getAlias

        public static com.pulumi.core.Output<GetAliasResult> getAlias​(GetAliasArgs args,
                                                              com.pulumi.deployment.InvokeOutputOptions options)
        Use this data source to get the ARN of a KMS key alias. By using this data source, you can reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetAliasArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var s3 = KmsFunctions.getAlias(GetAliasArgs.builder()
             .name("alias/aws/s3")
             .build());
 
     }
 }

      • getAliasPlain

        public static java.util.concurrent.CompletableFuture<GetAliasResult> getAliasPlain​(GetAliasPlainArgs args,
                                                                                   com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the ARN of a KMS key alias. By using this data source, you can reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetAliasArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var s3 = KmsFunctions.getAlias(GetAliasArgs.builder()
             .name("alias/aws/s3")
             .build());
 
     }
 }

      • getCipherText

        public static com.pulumi.core.Output<GetCipherTextResult> getCipherText​(GetCipherTextArgs args)
        The KMS ciphertext data source allows you to encrypt plaintext into ciphertext by using an AWS KMS customer master key. The value returned by this data source changes every apply. For a stable ciphertext value, see the `aws.kms.Ciphertext` resource. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.Key;
 import com.pulumi.aws.kms.KeyArgs;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCipherTextArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var oauthConfig = new Key("oauthConfig", KeyArgs.builder()
             .description("oauth config")
             .isEnabled(true)
             .build());
 
         final var oauth = KmsFunctions.getCipherText(GetCipherTextArgs.builder()
             .keyId(oauthConfig.keyId())
             .plaintext("""
 {
   \"client_id\": \"e587dbae22222f55da22\",
   \"client_secret\": \"8289575d00000ace55e1815ec13673955721b8a5\"
 }
             """)
             .build());
 
     }
 }

      • getCipherTextPlain

        public static java.util.concurrent.CompletableFuture<GetCipherTextResult> getCipherTextPlain​(GetCipherTextPlainArgs args)
        The KMS ciphertext data source allows you to encrypt plaintext into ciphertext by using an AWS KMS customer master key. The value returned by this data source changes every apply. For a stable ciphertext value, see the `aws.kms.Ciphertext` resource. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.Key;
 import com.pulumi.aws.kms.KeyArgs;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCipherTextArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var oauthConfig = new Key("oauthConfig", KeyArgs.builder()
             .description("oauth config")
             .isEnabled(true)
             .build());
 
         final var oauth = KmsFunctions.getCipherText(GetCipherTextArgs.builder()
             .keyId(oauthConfig.keyId())
             .plaintext("""
 {
   \"client_id\": \"e587dbae22222f55da22\",
   \"client_secret\": \"8289575d00000ace55e1815ec13673955721b8a5\"
 }
             """)
             .build());
 
     }
 }

      • getCipherText

        public static com.pulumi.core.Output<GetCipherTextResult> getCipherText​(GetCipherTextArgs args,
                                                                        com.pulumi.deployment.InvokeOptions options)
        The KMS ciphertext data source allows you to encrypt plaintext into ciphertext by using an AWS KMS customer master key. The value returned by this data source changes every apply. For a stable ciphertext value, see the `aws.kms.Ciphertext` resource. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.Key;
 import com.pulumi.aws.kms.KeyArgs;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCipherTextArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var oauthConfig = new Key("oauthConfig", KeyArgs.builder()
             .description("oauth config")
             .isEnabled(true)
             .build());
 
         final var oauth = KmsFunctions.getCipherText(GetCipherTextArgs.builder()
             .keyId(oauthConfig.keyId())
             .plaintext("""
 {
   \"client_id\": \"e587dbae22222f55da22\",
   \"client_secret\": \"8289575d00000ace55e1815ec13673955721b8a5\"
 }
             """)
             .build());
 
     }
 }

      • getCipherText

        public static com.pulumi.core.Output<GetCipherTextResult> getCipherText​(GetCipherTextArgs args,
                                                                        com.pulumi.deployment.InvokeOutputOptions options)
        The KMS ciphertext data source allows you to encrypt plaintext into ciphertext by using an AWS KMS customer master key. The value returned by this data source changes every apply. For a stable ciphertext value, see the `aws.kms.Ciphertext` resource. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.Key;
 import com.pulumi.aws.kms.KeyArgs;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCipherTextArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var oauthConfig = new Key("oauthConfig", KeyArgs.builder()
             .description("oauth config")
             .isEnabled(true)
             .build());
 
         final var oauth = KmsFunctions.getCipherText(GetCipherTextArgs.builder()
             .keyId(oauthConfig.keyId())
             .plaintext("""
 {
   \"client_id\": \"e587dbae22222f55da22\",
   \"client_secret\": \"8289575d00000ace55e1815ec13673955721b8a5\"
 }
             """)
             .build());
 
     }
 }

      • getCipherTextPlain

        public static java.util.concurrent.CompletableFuture<GetCipherTextResult> getCipherTextPlain​(GetCipherTextPlainArgs args,
                                                                                             com.pulumi.deployment.InvokeOptions options)
        The KMS ciphertext data source allows you to encrypt plaintext into ciphertext by using an AWS KMS customer master key. The value returned by this data source changes every apply. For a stable ciphertext value, see the `aws.kms.Ciphertext` resource. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.Key;
 import com.pulumi.aws.kms.KeyArgs;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCipherTextArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         var oauthConfig = new Key("oauthConfig", KeyArgs.builder()
             .description("oauth config")
             .isEnabled(true)
             .build());
 
         final var oauth = KmsFunctions.getCipherText(GetCipherTextArgs.builder()
             .keyId(oauthConfig.keyId())
             .plaintext("""
 {
   \"client_id\": \"e587dbae22222f55da22\",
   \"client_secret\": \"8289575d00000ace55e1815ec13673955721b8a5\"
 }
             """)
             .build());
 
     }
 }

      • getCustomKeyStore

        public static com.pulumi.core.Output<GetCustomKeyStoreResult> getCustomKeyStore()
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStorePlain

        public static java.util.concurrent.CompletableFuture<GetCustomKeyStoreResult> getCustomKeyStorePlain()
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStore

        public static com.pulumi.core.Output<GetCustomKeyStoreResult> getCustomKeyStore​(GetCustomKeyStoreArgs args)
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStorePlain

        public static java.util.concurrent.CompletableFuture<GetCustomKeyStoreResult> getCustomKeyStorePlain​(GetCustomKeyStorePlainArgs args)
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStore

        public static com.pulumi.core.Output<GetCustomKeyStoreResult> getCustomKeyStore​(GetCustomKeyStoreArgs args,
                                                                                com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStore

        public static com.pulumi.core.Output<GetCustomKeyStoreResult> getCustomKeyStore​(GetCustomKeyStoreArgs args,
                                                                                com.pulumi.deployment.InvokeOutputOptions options)
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getCustomKeyStorePlain

        public static java.util.concurrent.CompletableFuture<GetCustomKeyStoreResult> getCustomKeyStorePlain​(GetCustomKeyStorePlainArgs args,
                                                                                                     com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the metadata KMS custom key store. By using this data source, you can reference KMS custom key store without having to hard code the ID as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetCustomKeyStoreArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var keystore = KmsFunctions.getCustomKeyStore(GetCustomKeyStoreArgs.builder()
             .customKeyStoreName("my_cloudhsm")
             .build());
 
     }
 }

      • getKey

        public static com.pulumi.core.Output<GetKeyResult> getKey​(GetKeyArgs args)
        Use this data source to get detailed information about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getKeyPlain

        public static java.util.concurrent.CompletableFuture<GetKeyResult> getKeyPlain​(GetKeyPlainArgs args)
        Use this data source to get detailed information about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getKey

        public static com.pulumi.core.Output<GetKeyResult> getKey​(GetKeyArgs args,
                                                          com.pulumi.deployment.InvokeOptions options)
        Use this data source to get detailed information about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getKey

        public static com.pulumi.core.Output<GetKeyResult> getKey​(GetKeyArgs args,
                                                          com.pulumi.deployment.InvokeOutputOptions options)
        Use this data source to get detailed information about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getKeyPlain

        public static java.util.concurrent.CompletableFuture<GetKeyResult> getKeyPlain​(GetKeyPlainArgs args,
                                                                               com.pulumi.deployment.InvokeOptions options)
        Use this data source to get detailed information about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getKey(GetKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getPublicKey

        public static com.pulumi.core.Output<GetPublicKeyResult> getPublicKey​(GetPublicKeyArgs args)
        Use this data source to get the public key about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetPublicKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getPublicKeyPlain

        public static java.util.concurrent.CompletableFuture<GetPublicKeyResult> getPublicKeyPlain​(GetPublicKeyPlainArgs args)
        Use this data source to get the public key about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetPublicKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getPublicKey

        public static com.pulumi.core.Output<GetPublicKeyResult> getPublicKey​(GetPublicKeyArgs args,
                                                                      com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the public key about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetPublicKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getPublicKey

        public static com.pulumi.core.Output<GetPublicKeyResult> getPublicKey​(GetPublicKeyArgs args,
                                                                      com.pulumi.deployment.InvokeOutputOptions options)
        Use this data source to get the public key about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetPublicKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getPublicKeyPlain

        public static java.util.concurrent.CompletableFuture<GetPublicKeyResult> getPublicKeyPlain​(GetPublicKeyPlainArgs args,
                                                                                           com.pulumi.deployment.InvokeOptions options)
        Use this data source to get the public key about the specified KMS Key with flexible key ID input. This can be useful to reference key alias without having to hard code the ARN as input. ## Example Usage 
         
 package generated_program;
 
 import com.pulumi.Context;
 import com.pulumi.Pulumi;
 import com.pulumi.core.Output;
 import com.pulumi.aws.kms.KmsFunctions;
 import com.pulumi.aws.kms.inputs.GetPublicKeyArgs;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.Map;
 import java.io.File;
 import java.nio.file.Files;
 import java.nio.file.Paths;
 
 public class App {
     public static void main(String[] args) {
         Pulumi.run(App::stack);
     }
 
     public static void stack(Context ctx) {
         final var byAlias = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("alias/my-key")
             .build());
 
         final var byId = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
         final var byAliasArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:alias/my-key")
             .build());
 
         final var byKeyArn = KmsFunctions.getPublicKey(GetPublicKeyArgs.builder()
             .keyId("arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab")
             .build());
 
     }
 }

      • getSecret

        public static com.pulumi.core.Output<GetSecretResult> getSecret​(GetSecretArgs args)
        > **WARNING:** This data source's functionality was removed in version 2.0.0 of the AWS Provider. You can migrate existing configurations to the `aws.kms.getSecrets` data source following instructions available in the Version 2 Upgrade Guide. This data source will be removed in a future version.

      • getSecretPlain

        public static java.util.concurrent.CompletableFuture<GetSecretResult> getSecretPlain​(GetSecretPlainArgs args)
        > **WARNING:** This data source's functionality was removed in version 2.0.0 of the AWS Provider. You can migrate existing configurations to the `aws.kms.getSecrets` data source following instructions available in the Version 2 Upgrade Guide. This data source will be removed in a future version.

      • getSecret

        public static com.pulumi.core.Output<GetSecretResult> getSecret​(GetSecretArgs args,
                                                                com.pulumi.deployment.InvokeOptions options)
        > **WARNING:** This data source's functionality was removed in version 2.0.0 of the AWS Provider. You can migrate existing configurations to the `aws.kms.getSecrets` data source following instructions available in the Version 2 Upgrade Guide. This data source will be removed in a future version.

      • getSecret

        public static com.pulumi.core.Output<GetSecretResult> getSecret​(GetSecretArgs args,
                                                                com.pulumi.deployment.InvokeOutputOptions options)
        > **WARNING:** This data source's functionality was removed in version 2.0.0 of the AWS Provider. You can migrate existing configurations to the `aws.kms.getSecrets` data source following instructions available in the Version 2 Upgrade Guide. This data source will be removed in a future version.

      • getSecretPlain

        public static java.util.concurrent.CompletableFuture<GetSecretResult> getSecretPlain​(GetSecretPlainArgs args,
                                                                                     com.pulumi.deployment.InvokeOptions options)
        > **WARNING:** This data source's functionality was removed in version 2.0.0 of the AWS Provider. You can migrate existing configurations to the `aws.kms.getSecrets` data source following instructions available in the Version 2 Upgrade Guide. This data source will be removed in a future version.

      • getSecrets

        public static com.pulumi.core.Output<GetSecretsResult> getSecrets​(GetSecretsArgs args)
        Decrypt multiple secrets from data encrypted with the AWS KMS service. ## Example Usage If you do not already have a `CiphertextBlob` from encrypting a KMS secret, you can use the below commands to obtain one using the [AWS CLI `kms encrypt`](https://docs.aws.amazon.com/cli/latest/reference/kms/encrypt.html) command. This requires you to have your AWS CLI setup correctly and replace the `--key-id` with your own. Alternatively you can use `--plaintext 'master-password'` (CLIv1) or `--plaintext fileb://<(echo -n 'master-password')` (CLIv2) instead of reading from a file. > If you have a newline character at the end of your file, it will be decrypted with this newline character intact. For most use cases this is undesirable and leads to incorrect passwords or invalid values, as well as possible changes in the plan. Be sure to use `echo -n` if necessary. If you are using asymmetric keys ensure you are using the right encryption algorithm when you encrypt and decrypt else you will get IncorrectKeyException during the decrypt phase. That encrypted output can now be inserted into provider configurations without exposing the plaintext secret directly.

      • getSecretsPlain

        public static java.util.concurrent.CompletableFuture<GetSecretsResult> getSecretsPlain​(GetSecretsPlainArgs args)
        Decrypt multiple secrets from data encrypted with the AWS KMS service. ## Example Usage If you do not already have a `CiphertextBlob` from encrypting a KMS secret, you can use the below commands to obtain one using the [AWS CLI `kms encrypt`](https://docs.aws.amazon.com/cli/latest/reference/kms/encrypt.html) command. This requires you to have your AWS CLI setup correctly and replace the `--key-id` with your own. Alternatively you can use `--plaintext 'master-password'` (CLIv1) or `--plaintext fileb://<(echo -n 'master-password')` (CLIv2) instead of reading from a file. > If you have a newline character at the end of your file, it will be decrypted with this newline character intact. For most use cases this is undesirable and leads to incorrect passwords or invalid values, as well as possible changes in the plan. Be sure to use `echo -n` if necessary. If you are using asymmetric keys ensure you are using the right encryption algorithm when you encrypt and decrypt else you will get IncorrectKeyException during the decrypt phase. That encrypted output can now be inserted into provider configurations without exposing the plaintext secret directly.

      • getSecrets

        public static com.pulumi.core.Output<GetSecretsResult> getSecrets​(GetSecretsArgs args,
                                                                  com.pulumi.deployment.InvokeOptions options)
        Decrypt multiple secrets from data encrypted with the AWS KMS service. ## Example Usage If you do not already have a `CiphertextBlob` from encrypting a KMS secret, you can use the below commands to obtain one using the [AWS CLI `kms encrypt`](https://docs.aws.amazon.com/cli/latest/reference/kms/encrypt.html) command. This requires you to have your AWS CLI setup correctly and replace the `--key-id` with your own. Alternatively you can use `--plaintext 'master-password'` (CLIv1) or `--plaintext fileb://<(echo -n 'master-password')` (CLIv2) instead of reading from a file. > If you have a newline character at the end of your file, it will be decrypted with this newline character intact. For most use cases this is undesirable and leads to incorrect passwords or invalid values, as well as possible changes in the plan. Be sure to use `echo -n` if necessary. If you are using asymmetric keys ensure you are using the right encryption algorithm when you encrypt and decrypt else you will get IncorrectKeyException during the decrypt phase. That encrypted output can now be inserted into provider configurations without exposing the plaintext secret directly.

      • getSecrets

        public static com.pulumi.core.Output<GetSecretsResult> getSecrets​(GetSecretsArgs args,
                                                                  com.pulumi.deployment.InvokeOutputOptions options)
        Decrypt multiple secrets from data encrypted with the AWS KMS service. ## Example Usage If you do not already have a `CiphertextBlob` from encrypting a KMS secret, you can use the below commands to obtain one using the [AWS CLI `kms encrypt`](https://docs.aws.amazon.com/cli/latest/reference/kms/encrypt.html) command. This requires you to have your AWS CLI setup correctly and replace the `--key-id` with your own. Alternatively you can use `--plaintext 'master-password'` (CLIv1) or `--plaintext fileb://<(echo -n 'master-password')` (CLIv2) instead of reading from a file. > If you have a newline character at the end of your file, it will be decrypted with this newline character intact. For most use cases this is undesirable and leads to incorrect passwords or invalid values, as well as possible changes in the plan. Be sure to use `echo -n` if necessary. If you are using asymmetric keys ensure you are using the right encryption algorithm when you encrypt and decrypt else you will get IncorrectKeyException during the decrypt phase. That encrypted output can now be inserted into provider configurations without exposing the plaintext secret directly.

      • getSecretsPlain

        public static java.util.concurrent.CompletableFuture<GetSecretsResult> getSecretsPlain​(GetSecretsPlainArgs args,
                                                                                       com.pulumi.deployment.InvokeOptions options)
        Decrypt multiple secrets from data encrypted with the AWS KMS service. ## Example Usage If you do not already have a `CiphertextBlob` from encrypting a KMS secret, you can use the below commands to obtain one using the [AWS CLI `kms encrypt`](https://docs.aws.amazon.com/cli/latest/reference/kms/encrypt.html) command. This requires you to have your AWS CLI setup correctly and replace the `--key-id` with your own. Alternatively you can use `--plaintext 'master-password'` (CLIv1) or `--plaintext fileb://<(echo -n 'master-password')` (CLIv2) instead of reading from a file. > If you have a newline character at the end of your file, it will be decrypted with this newline character intact. For most use cases this is undesirable and leads to incorrect passwords or invalid values, as well as possible changes in the plan. Be sure to use `echo -n` if necessary. If you are using asymmetric keys ensure you are using the right encryption algorithm when you encrypt and decrypt else you will get IncorrectKeyException during the decrypt phase. That encrypted output can now be inserted into provider configurations without exposing the plaintext secret directly.