pulumi-aws-kotlin/com.pulumi.aws.ebs.kotlin/DefaultKmsKeyArgs

DefaultKmsKeyArgs

data class DefaultKmsKeyArgs(val keyArn: Output<String>? = null) : ConvertibleToJava<DefaultKmsKeyArgs>

Provides a resource to manage the default customer master key (CMK) that your AWS account uses to encrypt EBS volumes. Your AWS account has an AWS-managed default CMK that is used for encrypting an EBS volume when no CMK is specified in the API call that creates the volume. By using the aws.ebs.DefaultKmsKey resource, you can specify a customer-managed CMK to use in place of the AWS-managed default CMK.

NOTE: Creating an aws.ebs.DefaultKmsKey resource does not enable default EBS encryption. Use the aws.ebs.EncryptionByDefault to enable default EBS encryption. NOTE: Destroying this resource will reset the default CMK to the account's AWS-managed default CMK for EBS.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.ebs.DefaultKmsKey("example", {keyArn: exampleAwsKmsKey.arn});

import pulumi
import pulumi_aws as aws
example = aws.ebs.DefaultKmsKey("example", key_arn=example_aws_kms_key["arn"])

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var example = new Aws.Ebs.DefaultKmsKey("example", new()
    {
        KeyArn = exampleAwsKmsKey.Arn,
    });
});

package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/ebs"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ebs.NewDefaultKmsKey(ctx, "example", &ebs.DefaultKmsKeyArgs{
			KeyArn: pulumi.Any(exampleAwsKmsKey.Arn),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.ebs.DefaultKmsKey;
import com.pulumi.aws.ebs.DefaultKmsKeyArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new DefaultKmsKey("example", DefaultKmsKeyArgs.builder()
            .keyArn(exampleAwsKmsKey.arn())
            .build());
    }
}

resources:
  example:
    type: aws:ebs:DefaultKmsKey
    properties:
      keyArn: ${exampleAwsKmsKey.arn}

Import

Using pulumi import, import the EBS default KMS CMK using the KMS key ARN. For example:

$ pulumi import aws:ebs/defaultKmsKey:DefaultKmsKey example arn:aws:kms:us-east-1:123456789012:key/abcd-1234

Constructors

DefaultKmsKeyArgs

constructor(keyArn: Output<String>? = null)

Properties

keyArn

val keyArn: Output<String>? = null

The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use to encrypt the EBS volume.

Functions

toJava

open override fun toJava(): DefaultKmsKeyArgs