» yandex_kms_symmetric_key

Creates a Yandex KMS symmetric key that can be used for cryptographic operation.

For more information, see the official documentation.

» Example Usage

resource "yandex_kms_symmetric_key" "key-a" {
  name              = "example-symetric-key"
  description       = "description for key"
  default_algorithm = "AES_128"
  rotation_period   = "8760h" // equal to 1 year
}

» Argument Reference

The following arguments are supported:

  • name - (Optional) Name of the key.

  • description - (Optional) An optional description of the key.

  • folder_id - (Optional) The ID of the folder that the resource belongs to. If it is not provided, the default provider folder is used.

  • labels - (Optional) A set of key/value label pairs to assign to the key.

  • default_algorithm - (Optional) Encryption algorithm to be used with a new key version, generated with the next rotation. The default value is AES_128.

  • rotation_period - (Optional) Interval between automatic rotations. To disable automatic rotation, omit this parameter.

» Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

» Timeouts

yandex_kms_symmetric_key provides the following configuration options for timeouts:

» Import

A KMS symmetric key can be imported using the id of the resource, e.g.

$ terraform import yandex_kms_symmetric_key.top-secret kms_key_id