Package com.pulumi.aws.kms.inputs

Class ReplicaExternalKeyState.Builder

  • Enclosing class:
    ReplicaExternalKeyState
    public static final class ReplicaExternalKeyState.Builder
extends java.lang.Object

    • Method Detail

      • arn

        public ReplicaExternalKeyState.Builder arn​(@Nullable
                                           com.pulumi.core.Output<java.lang.String> arn)
        Parameters:
        arn - ARN of the replica key. The key ARNs of related multi-Region keys differ only in the Region value.
        Returns:
        builder

      • arn

        public ReplicaExternalKeyState.Builder arn​(java.lang.String arn)
        Parameters:
        arn - ARN of the replica key. The key ARNs of related multi-Region keys differ only in the Region value.
        Returns:
        builder

      • bypassPolicyLockoutSafetyCheck

        public ReplicaExternalKeyState.Builder bypassPolicyLockoutSafetyCheck​(@Nullable
                                                                      com.pulumi.core.Output<java.lang.Boolean> bypassPolicyLockoutSafetyCheck)
        Parameters:
        bypassPolicyLockoutSafetyCheck - Whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately. For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS KMS Developer Guide_. The default value is `false`.
        Returns:
        builder

      • bypassPolicyLockoutSafetyCheck

        public ReplicaExternalKeyState.Builder bypassPolicyLockoutSafetyCheck​(java.lang.Boolean bypassPolicyLockoutSafetyCheck)
        Parameters:
        bypassPolicyLockoutSafetyCheck - Whether to bypass the key policy lockout safety check. Setting this value to true increases the risk that the KMS key becomes unmanageable. Do not set this value to true indiscriminately. For more information, refer to the scenario in the [Default Key Policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default-allow-root-enable-iam) section in the _AWS KMS Developer Guide_. The default value is `false`.
        Returns:
        builder

      • deletionWindowInDays

        public ReplicaExternalKeyState.Builder deletionWindowInDays​(@Nullable
                                                            com.pulumi.core.Output<java.lang.Integer> deletionWindowInDays)
        Parameters:
        deletionWindowInDays - Waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key. If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
        Returns:
        builder

      • deletionWindowInDays

        public ReplicaExternalKeyState.Builder deletionWindowInDays​(java.lang.Integer deletionWindowInDays)
        Parameters:
        deletionWindowInDays - Waiting period, specified in number of days. After the waiting period ends, AWS KMS deletes the KMS key. If you specify a value, it must be between `7` and `30`, inclusive. If you do not specify a value, it defaults to `30`.
        Returns:
        builder

      • description

        public ReplicaExternalKeyState.Builder description​(@Nullable
                                                   com.pulumi.core.Output<java.lang.String> description)
        Parameters:
        description - Description of the KMS key.
        Returns:
        builder

      • description

        public ReplicaExternalKeyState.Builder description​(java.lang.String description)
        Parameters:
        description - Description of the KMS key.
        Returns:
        builder

      • enabled

        public ReplicaExternalKeyState.Builder enabled​(@Nullable
                                               com.pulumi.core.Output<java.lang.Boolean> enabled)
        Parameters:
        enabled - Whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. Keys pending import can only be `false`. Imported keys default to `true` unless expired.
        Returns:
        builder

      • enabled

        public ReplicaExternalKeyState.Builder enabled​(java.lang.Boolean enabled)
        Parameters:
        enabled - Whether the replica key is enabled. Disabled KMS keys cannot be used in cryptographic operations. Keys pending import can only be `false`. Imported keys default to `true` unless expired.
        Returns:
        builder

      • expirationModel

        public ReplicaExternalKeyState.Builder expirationModel​(@Nullable
                                                       com.pulumi.core.Output<java.lang.String> expirationModel)
        Parameters:
        expirationModel - Whether the key material expires. Empty when pending key material import, otherwise `KEY_MATERIAL_EXPIRES` or `KEY_MATERIAL_DOES_NOT_EXPIRE`.
        Returns:
        builder

      • expirationModel

        public ReplicaExternalKeyState.Builder expirationModel​(java.lang.String expirationModel)
        Parameters:
        expirationModel - Whether the key material expires. Empty when pending key material import, otherwise `KEY_MATERIAL_EXPIRES` or `KEY_MATERIAL_DOES_NOT_EXPIRE`.
        Returns:
        builder

      • keyId

        public ReplicaExternalKeyState.Builder keyId​(@Nullable
                                             com.pulumi.core.Output<java.lang.String> keyId)
        Parameters:
        keyId - Key ID of the replica key. Related multi-Region keys have the same key ID.
        Returns:
        builder

      • keyId

        public ReplicaExternalKeyState.Builder keyId​(java.lang.String keyId)
        Parameters:
        keyId - Key ID of the replica key. Related multi-Region keys have the same key ID.
        Returns:
        builder

      • keyMaterialBase64

        public ReplicaExternalKeyState.Builder keyMaterialBase64​(@Nullable
                                                         com.pulumi.core.Output<java.lang.String> keyMaterialBase64)
        Parameters:
        keyMaterialBase64 - Base64 encoded 256-bit symmetric encryption key material to import. The KMS key is permanently associated with this key material. The same key material can be [reimported](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html#reimport-key-material), but you cannot import different key material.
        Returns:
        builder

      • keyMaterialBase64

        public ReplicaExternalKeyState.Builder keyMaterialBase64​(java.lang.String keyMaterialBase64)
        Parameters:
        keyMaterialBase64 - Base64 encoded 256-bit symmetric encryption key material to import. The KMS key is permanently associated with this key material. The same key material can be [reimported](https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html#reimport-key-material), but you cannot import different key material.
        Returns:
        builder

      • keyState

        public ReplicaExternalKeyState.Builder keyState​(@Nullable
                                                com.pulumi.core.Output<java.lang.String> keyState)
        Parameters:
        keyState - State of the replica key.
        Returns:
        builder

      • keyState

        public ReplicaExternalKeyState.Builder keyState​(java.lang.String keyState)
        Parameters:
        keyState - State of the replica key.
        Returns:
        builder

      • keyUsage

        public ReplicaExternalKeyState.Builder keyUsage​(@Nullable
                                                com.pulumi.core.Output<java.lang.String> keyUsage)
        Parameters:
        keyUsage - [Cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. This is a shared property of multi-Region keys.
        Returns:
        builder

      • keyUsage

        public ReplicaExternalKeyState.Builder keyUsage​(java.lang.String keyUsage)
        Parameters:
        keyUsage - [Cryptographic operations](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#cryptographic-operations) for which you can use the KMS key. This is a shared property of multi-Region keys.
        Returns:
        builder

      • policy

        public ReplicaExternalKeyState.Builder policy​(@Nullable
                                              com.pulumi.core.Output<java.lang.String> policy)
        Parameters:
        policy - Key policy to attach to the KMS key. If you do not specify a key policy, AWS KMS attaches the [default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) to the KMS key.
        Returns:
        builder

      • policy

        public ReplicaExternalKeyState.Builder policy​(java.lang.String policy)
        Parameters:
        policy - Key policy to attach to the KMS key. If you do not specify a key policy, AWS KMS attaches the [default key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html#key-policy-default) to the KMS key.
        Returns:
        builder

      • primaryKeyArn

        public ReplicaExternalKeyState.Builder primaryKeyArn​(@Nullable
                                                     com.pulumi.core.Output<java.lang.String> primaryKeyArn)
        Parameters:
        primaryKeyArn - ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
        Returns:
        builder

      • primaryKeyArn

        public ReplicaExternalKeyState.Builder primaryKeyArn​(java.lang.String primaryKeyArn)
        Parameters:
        primaryKeyArn - ARN of the multi-Region primary key to replicate. The primary key must be in a different AWS Region of the same AWS Partition. You can create only one replica of a given primary key in each AWS Region.
        Returns:
        builder

      • region

        public ReplicaExternalKeyState.Builder region​(@Nullable
                                              com.pulumi.core.Output<java.lang.String> region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • region

        public ReplicaExternalKeyState.Builder region​(java.lang.String region)
        Parameters:
        region - Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
        Returns:
        builder

      • tags

        public ReplicaExternalKeyState.Builder tags​(@Nullable
                                            com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tags)
        Parameters:
        tags - Map of tags to assign to the replica key. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tags

        public ReplicaExternalKeyState.Builder tags​(java.util.Map<java.lang.String,​java.lang.String> tags)
        Parameters:
        tags - Map of tags to assign to the replica key. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
        Returns:
        builder

      • tagsAll

        public ReplicaExternalKeyState.Builder tagsAll​(@Nullable
                                               com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll)
        Parameters:
        tagsAll - Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • tagsAll

        public ReplicaExternalKeyState.Builder tagsAll​(java.util.Map<java.lang.String,​java.lang.String> tagsAll)
        Parameters:
        tagsAll - Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
        Returns:
        builder

      • validTo

        public ReplicaExternalKeyState.Builder validTo​(@Nullable
                                               com.pulumi.core.Output<java.lang.String> validTo)
        Parameters:
        validTo - Time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the key becomes unusable. If not specified, key material does not expire. Valid values: [RFC3339 time string](https://tools.ietf.org/html/rfc3339#section-5.8) (`YYYY-MM-DDTHH:MM:SSZ`)
        Returns:
        builder

      • validTo

        public ReplicaExternalKeyState.Builder validTo​(java.lang.String validTo)
        Parameters:
        validTo - Time at which the imported key material expires. When the key material expires, AWS KMS deletes the key material and the key becomes unusable. If not specified, key material does not expire. Valid values: [RFC3339 time string](https://tools.ietf.org/html/rfc3339#section-5.8) (`YYYY-MM-DDTHH:MM:SSZ`)
        Returns:
        builder