@volcengine/pulumi 0.0.45 → 0.0.47

package/kms/key.d.ts

@@ -23,6 +23,44 @@ import * as outputs from "../types/output";
  *         value: "tfvalue3",
  *     }],
  * });
+ * const foo1 = new volcengine.kms.Key("foo1", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: "Tf-test-key-1",
+ *     rotateState: "Enable",
+ *     rotateInterval: 90,
+ *     keySpec: "SYMMETRIC_128",
+ *     description: "Tf test key with SYMMETRIC_128",
+ *     keyUsage: "ENCRYPT_DECRYPT",
+ *     protectionLevel: "SOFTWARE",
+ *     origin: "CloudKMS",
+ *     multiRegion: false,
+ *     pendingWindowInDays: 30,
+ *     tags: [
+ *         {
+ *             key: "tfk1",
+ *             value: "tfv1",
+ *         },
+ *         {
+ *             key: "tfk2",
+ *             value: "tfv2",
+ *         },
+ *     ],
+ * });
+ * const foo2 = new volcengine.kms.Key("foo2", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: "mrk-Tf-test-key-2",
+ *     keyUsage: "ENCRYPT_DECRYPT",
+ *     origin: "External",
+ *     multiRegion: true,
+ * });
+ * const _default = new volcengine.kms.KeyMaterial("default", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: foo2.keyName,
+ *     encryptedKeyMaterial: "***",
+ *     importToken: "***",
+ *     expirationModel: "KEY_MATERIAL_EXPIRES",
+ *     validTo: 1770999621,
+ * });
  * ```
  *
  * ## Import
@@ -53,6 +91,10 @@ export declare class Key extends pulumi.CustomResource {
      * The date when the keyring was created.
      */
     readonly creationDate: pulumi.Output<number>;
+    /**
+     * The ID of the custom key store.
+     */
+    readonly customKeyStoreId: pulumi.Output<string | undefined>;
     /**
      * The description of the key.
      */
@@ -62,15 +104,15 @@ export declare class Key extends pulumi.CustomResource {
      */
     readonly keyMaterialExpireTime: pulumi.Output<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     readonly keyName: pulumi.Output<string>;
     /**
-     * The type of the keys.
+     * The type of the key. Valid values: SYMMETRIC_256, SYMMETRIC_128, RSA_2048, RSA_3072, RSA_4096, EC_P256K, EC_P256, EC_P384, EC_P521, EC_SM2. Default value: SYMMETRIC_256.
      */
     readonly keySpec: pulumi.Output<string>;
     /**
-     * The usage of the key.
+     * The usage of the key. Valid values: ENCRYPT_DECRYPT, SIGN_VERIFY, GENERATE_VERIFY_MAC. Default value: ENCRYPT_DECRYPT.
      */
     readonly keyUsage: pulumi.Output<string>;
     /**
@@ -82,7 +124,7 @@ export declare class Key extends pulumi.CustomResource {
      */
     readonly lastRotationTime: pulumi.Output<string>;
     /**
-     * Whether it is the master key of the Multi-region type.
+     * Whether it is the master key of the Multi-region type. When multiRegion is true, the key name must start with "mrk-".
      */
     readonly multiRegion: pulumi.Output<boolean>;
     /**
@@ -90,19 +132,23 @@ export declare class Key extends pulumi.CustomResource {
      */
     readonly multiRegionConfiguration: pulumi.Output<outputs.kms.KeyMultiRegionConfiguration>;
     /**
-     * The origin of the key.
+     * The origin of the key. Valid values: CloudKMS, External, ExternalKeyStore. Default value: CloudKMS.
      */
     readonly origin: pulumi.Output<string>;
     /**
-     * The pre-deletion cycle of the key.
+     * The pre-deletion cycle of the key. Valid values: [7, 30]. Default value: 7.
      */
     readonly pendingWindowInDays: pulumi.Output<number | undefined>;
     /**
-     * The protection level of the key.
+     * The protection level of the key. Valid values: SOFTWARE, HSM. Default value: SOFTWARE.
      */
     readonly protectionLevel: pulumi.Output<string>;
     /**
-     * The rotation state of the key.
+     * Key rotation period, unit: days; value range: [90, 2560], required when rotateState is Enable.
+     */
+    readonly rotateInterval: pulumi.Output<number | undefined>;
+    /**
+     * The rotation state of the key. Valid values: Enable, Disable. Only symmetric keys support rotation.
      */
     readonly rotateState: pulumi.Output<string | undefined>;
     /**
@@ -133,6 +179,10 @@ export declare class Key extends pulumi.CustomResource {
      * The date when the keyring was updated.
      */
     readonly updateDate: pulumi.Output<number>;
+    /**
+     * The ID of the external key store.
+     */
+    readonly xksKeyId: pulumi.Output<string | undefined>;
     /**
      * Create a Key resource with the given unique name, arguments, and options.
      *
@@ -150,6 +200,10 @@ export interface KeyState {
      * The date when the keyring was created.
      */
     creationDate?: pulumi.Input<number>;
+    /**
+     * The ID of the custom key store.
+     */
+    customKeyStoreId?: pulumi.Input<string>;
     /**
      * The description of the key.
      */
@@ -159,15 +213,15 @@ export interface KeyState {
      */
     keyMaterialExpireTime?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName?: pulumi.Input<string>;
     /**
-     * The type of the keys.
+     * The type of the key. Valid values: SYMMETRIC_256, SYMMETRIC_128, RSA_2048, RSA_3072, RSA_4096, EC_P256K, EC_P256, EC_P384, EC_P521, EC_SM2. Default value: SYMMETRIC_256.
      */
     keySpec?: pulumi.Input<string>;
     /**
-     * The usage of the key.
+     * The usage of the key. Valid values: ENCRYPT_DECRYPT, SIGN_VERIFY, GENERATE_VERIFY_MAC. Default value: ENCRYPT_DECRYPT.
      */
     keyUsage?: pulumi.Input<string>;
     /**
@@ -179,7 +233,7 @@ export interface KeyState {
      */
     lastRotationTime?: pulumi.Input<string>;
     /**
-     * Whether it is the master key of the Multi-region type.
+     * Whether it is the master key of the Multi-region type. When multiRegion is true, the key name must start with "mrk-".
      */
     multiRegion?: pulumi.Input<boolean>;
     /**
@@ -187,19 +241,23 @@ export interface KeyState {
      */
     multiRegionConfiguration?: pulumi.Input<inputs.kms.KeyMultiRegionConfiguration>;
     /**
-     * The origin of the key.
+     * The origin of the key. Valid values: CloudKMS, External, ExternalKeyStore. Default value: CloudKMS.
      */
     origin?: pulumi.Input<string>;
     /**
-     * The pre-deletion cycle of the key.
+     * The pre-deletion cycle of the key. Valid values: [7, 30]. Default value: 7.
      */
     pendingWindowInDays?: pulumi.Input<number>;
     /**
-     * The protection level of the key.
+     * The protection level of the key. Valid values: SOFTWARE, HSM. Default value: SOFTWARE.
      */
     protectionLevel?: pulumi.Input<string>;
     /**
-     * The rotation state of the key.
+     * Key rotation period, unit: days; value range: [90, 2560], required when rotateState is Enable.
+     */
+    rotateInterval?: pulumi.Input<number>;
+    /**
+     * The rotation state of the key. Valid values: Enable, Disable. Only symmetric keys support rotation.
      */
     rotateState?: pulumi.Input<string>;
     /**
@@ -230,25 +288,33 @@ export interface KeyState {
      * The date when the keyring was updated.
      */
     updateDate?: pulumi.Input<number>;
+    /**
+     * The ID of the external key store.
+     */
+    xksKeyId?: pulumi.Input<string>;
 }
 /**
  * The set of arguments for constructing a Key resource.
  */
 export interface KeyArgs {
+    /**
+     * The ID of the custom key store.
+     */
+    customKeyStoreId?: pulumi.Input<string>;
     /**
      * The description of the key.
      */
     description?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName: pulumi.Input<string>;
     /**
-     * The type of the keys.
+     * The type of the key. Valid values: SYMMETRIC_256, SYMMETRIC_128, RSA_2048, RSA_3072, RSA_4096, EC_P256K, EC_P256, EC_P384, EC_P521, EC_SM2. Default value: SYMMETRIC_256.
      */
     keySpec?: pulumi.Input<string>;
     /**
-     * The usage of the key.
+     * The usage of the key. Valid values: ENCRYPT_DECRYPT, SIGN_VERIFY, GENERATE_VERIFY_MAC. Default value: ENCRYPT_DECRYPT.
      */
     keyUsage?: pulumi.Input<string>;
     /**
@@ -256,27 +322,35 @@ export interface KeyArgs {
      */
     keyringName: pulumi.Input<string>;
     /**
-     * Whether it is the master key of the Multi-region type.
+     * Whether it is the master key of the Multi-region type. When multiRegion is true, the key name must start with "mrk-".
      */
     multiRegion?: pulumi.Input<boolean>;
     /**
-     * The origin of the key.
+     * The origin of the key. Valid values: CloudKMS, External, ExternalKeyStore. Default value: CloudKMS.
      */
     origin?: pulumi.Input<string>;
     /**
-     * The pre-deletion cycle of the key.
+     * The pre-deletion cycle of the key. Valid values: [7, 30]. Default value: 7.
      */
     pendingWindowInDays?: pulumi.Input<number>;
     /**
-     * The protection level of the key.
+     * The protection level of the key. Valid values: SOFTWARE, HSM. Default value: SOFTWARE.
      */
     protectionLevel?: pulumi.Input<string>;
     /**
-     * The rotation state of the key.
+     * Key rotation period, unit: days; value range: [90, 2560], required when rotateState is Enable.
+     */
+    rotateInterval?: pulumi.Input<number>;
+    /**
+     * The rotation state of the key. Valid values: Enable, Disable. Only symmetric keys support rotation.
      */
     rotateState?: pulumi.Input<string>;
     /**
      * Tags.
      */
     tags?: pulumi.Input<pulumi.Input<inputs.kms.KeyTag>[]>;
+    /**
+     * The ID of the external key store.
+     */
+    xksKeyId?: pulumi.Input<string>;
 }

package/kms/key.js

@@ -27,6 +27,44 @@ const utilities = require("../utilities");
  *         value: "tfvalue3",
  *     }],
  * });
+ * const foo1 = new volcengine.kms.Key("foo1", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: "Tf-test-key-1",
+ *     rotateState: "Enable",
+ *     rotateInterval: 90,
+ *     keySpec: "SYMMETRIC_128",
+ *     description: "Tf test key with SYMMETRIC_128",
+ *     keyUsage: "ENCRYPT_DECRYPT",
+ *     protectionLevel: "SOFTWARE",
+ *     origin: "CloudKMS",
+ *     multiRegion: false,
+ *     pendingWindowInDays: 30,
+ *     tags: [
+ *         {
+ *             key: "tfk1",
+ *             value: "tfv1",
+ *         },
+ *         {
+ *             key: "tfk2",
+ *             value: "tfv2",
+ *         },
+ *     ],
+ * });
+ * const foo2 = new volcengine.kms.Key("foo2", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: "mrk-Tf-test-key-2",
+ *     keyUsage: "ENCRYPT_DECRYPT",
+ *     origin: "External",
+ *     multiRegion: true,
+ * });
+ * const _default = new volcengine.kms.KeyMaterial("default", {
+ *     keyringName: fooKeyring.keyringName,
+ *     keyName: foo2.keyName,
+ *     encryptedKeyMaterial: "***",
+ *     importToken: "***",
+ *     expirationModel: "KEY_MATERIAL_EXPIRES",
+ *     validTo: 1770999621,
+ * });
  * ```
  *
  * ## Import
@@ -66,6 +104,7 @@ class Key extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState;
             resourceInputs["creationDate"] = state ? state.creationDate : undefined;
+            resourceInputs["customKeyStoreId"] = state ? state.customKeyStoreId : undefined;
             resourceInputs["description"] = state ? state.description : undefined;
             resourceInputs["keyMaterialExpireTime"] = state ? state.keyMaterialExpireTime : undefined;
             resourceInputs["keyName"] = state ? state.keyName : undefined;
@@ -78,6 +117,7 @@ class Key extends pulumi.CustomResource {
             resourceInputs["origin"] = state ? state.origin : undefined;
             resourceInputs["pendingWindowInDays"] = state ? state.pendingWindowInDays : undefined;
             resourceInputs["protectionLevel"] = state ? state.protectionLevel : undefined;
+            resourceInputs["rotateInterval"] = state ? state.rotateInterval : undefined;
             resourceInputs["rotateState"] = state ? state.rotateState : undefined;
             resourceInputs["rotationState"] = state ? state.rotationState : undefined;
             resourceInputs["scheduleDeleteTime"] = state ? state.scheduleDeleteTime : undefined;
@@ -86,6 +126,7 @@ class Key extends pulumi.CustomResource {
             resourceInputs["tags"] = state ? state.tags : undefined;
             resourceInputs["trn"] = state ? state.trn : undefined;
             resourceInputs["updateDate"] = state ? state.updateDate : undefined;
+            resourceInputs["xksKeyId"] = state ? state.xksKeyId : undefined;
         }
         else {
             const args = argsOrState;
@@ -95,6 +136,7 @@ class Key extends pulumi.CustomResource {
             if ((!args || args.keyringName === undefined) && !opts.urn) {
                 throw new Error("Missing required property 'keyringName'");
             }
+            resourceInputs["customKeyStoreId"] = args ? args.customKeyStoreId : undefined;
             resourceInputs["description"] = args ? args.description : undefined;
             resourceInputs["keyName"] = args ? args.keyName : undefined;
             resourceInputs["keySpec"] = args ? args.keySpec : undefined;
@@ -104,8 +146,10 @@ class Key extends pulumi.CustomResource {
             resourceInputs["origin"] = args ? args.origin : undefined;
             resourceInputs["pendingWindowInDays"] = args ? args.pendingWindowInDays : undefined;
             resourceInputs["protectionLevel"] = args ? args.protectionLevel : undefined;
+            resourceInputs["rotateInterval"] = args ? args.rotateInterval : undefined;
             resourceInputs["rotateState"] = args ? args.rotateState : undefined;
             resourceInputs["tags"] = args ? args.tags : undefined;
+            resourceInputs["xksKeyId"] = args ? args.xksKeyId : undefined;
             resourceInputs["creationDate"] = undefined /*out*/;
             resourceInputs["keyMaterialExpireTime"] = undefined /*out*/;
             resourceInputs["lastRotationTime"] = undefined /*out*/;

package/kms/key.js.map

@@ -1 +1 @@
-{"version":3,"file":"key.js","sourceRoot":"","sources":["../../kms/key.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IA+FD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5D,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/D,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3D,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AAnLL,kBAoLC;AAtKG,gBAAgB;AACO,gBAAY,GAAG,wBAAwB,CAAC"}
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../kms/key.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AACH,MAAa,GAAI,SAAQ,MAAM,CAAC,cAAc;IAC1C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgB,EAAE,IAAmC;QAC9G,OAAO,IAAI,GAAG,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,YAAY,CAAC;IACpD,CAAC;IA2GD,YAAY,IAAY,EAAE,WAAgC,EAAE,IAAmC;QAC3F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmC,CAAC;YAClD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACnE;aAAM;YACH,MAAM,IAAI,GAAG,WAAkC,CAAC;YAChD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,uBAAuB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5D,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/D,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3D,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxD,CAAC;;AArML,kBAsMC;AAxLG,gBAAgB;AACO,gBAAY,GAAG,wBAAwB,CAAC"}

package/kms/keyArchive.d.ts

@@ -55,11 +55,11 @@ export declare class KeyArchive extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is KeyArchive;
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     readonly keyId: pulumi.Output<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     readonly keyName: pulumi.Output<string>;
     /**
@@ -84,11 +84,11 @@ export declare class KeyArchive extends pulumi.CustomResource {
  */
 export interface KeyArchiveState {
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     keyId?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName?: pulumi.Input<string>;
     /**
@@ -105,11 +105,11 @@ export interface KeyArchiveState {
  */
 export interface KeyArchiveArgs {
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     keyId?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName?: pulumi.Input<string>;
     /**

package/kms/keyEnable.d.ts

@@ -41,11 +41,11 @@ export declare class KeyEnable extends pulumi.CustomResource {
      */
     static isInstance(obj: any): obj is KeyEnable;
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     readonly keyId: pulumi.Output<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     readonly keyName: pulumi.Output<string>;
     /**
@@ -70,11 +70,11 @@ export declare class KeyEnable extends pulumi.CustomResource {
  */
 export interface KeyEnableState {
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     keyId?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName?: pulumi.Input<string>;
     /**
@@ -91,11 +91,11 @@ export interface KeyEnableState {
  */
 export interface KeyEnableArgs {
     /**
-     * The id of the CMK.
+     * The id of the key. When keyId is not specified, both keyringName and keyName must be specified.
      */
     keyId?: pulumi.Input<string>;
     /**
-     * The name of the CMK.
+     * The name of the key.
      */
     keyName?: pulumi.Input<string>;
     /**

package/kms/keyMaterial.d.ts

@@ -0,0 +1,141 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Provides a resource to manage kms key material
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as volcengine from "@volcengine/pulumi";
+ *
+ * // It is necessary to first use data volcengine_kms_key_materials to obtain the import materials, such as import_token, public_key.
+ * // Reference document: https://www.volcengine.com/docs/6476/144950?lang=zh
+ * const _default = new volcengine.kms.KeyMaterial("default", {
+ *     encryptedKeyMaterial: "***",
+ *     expirationModel: "KEY_MATERIAL_EXPIRES",
+ *     importToken: "***",
+ *     keyId: "8798cd1e-****-4f9b-****-d51847ad53ae",
+ *     keyName: "Test-3",
+ *     keyringName: "Tf-test-1",
+ *     validTo: 1770969621,
+ * });
+ * ```
+ */
+export declare class KeyMaterial extends pulumi.CustomResource {
+    /**
+     * Get an existing KeyMaterial resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: KeyMaterialState, opts?: pulumi.CustomResourceOptions): KeyMaterial;
+    /**
+     * Returns true if the given object is an instance of KeyMaterial.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is KeyMaterial;
+    /**
+     * The encrypted key material, Base64 encoded.
+     */
+    readonly encryptedKeyMaterial: pulumi.Output<string>;
+    /**
+     * The expiration model of key material. Valid values: `KEY_MATERIAL_DOES_NOT_EXPIRE`, `KEY_MATERIAL_EXPIRES`. Default value: `KEY_MATERIAL_DOES_NOT_EXPIRE`.
+     */
+    readonly expirationModel: pulumi.Output<string | undefined>;
+    /**
+     * The import token.
+     */
+    readonly importToken: pulumi.Output<string>;
+    /**
+     * The id of key. When keyId is not specified, both keyringName and keyName must be specified.
+     */
+    readonly keyId: pulumi.Output<string | undefined>;
+    /**
+     * The name of key.
+     */
+    readonly keyName: pulumi.Output<string | undefined>;
+    /**
+     * The name of keyring.
+     */
+    readonly keyringName: pulumi.Output<string | undefined>;
+    /**
+     * The valid to timestamp of key material. Required when expirationModel is KEY_MATERIAL_EXPIRES. Unit: second.
+     */
+    readonly validTo: pulumi.Output<number | undefined>;
+    /**
+     * Create a KeyMaterial resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: KeyMaterialArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering KeyMaterial resources.
+ */
+export interface KeyMaterialState {
+    /**
+     * The encrypted key material, Base64 encoded.
+     */
+    encryptedKeyMaterial?: pulumi.Input<string>;
+    /**
+     * The expiration model of key material. Valid values: `KEY_MATERIAL_DOES_NOT_EXPIRE`, `KEY_MATERIAL_EXPIRES`. Default value: `KEY_MATERIAL_DOES_NOT_EXPIRE`.
+     */
+    expirationModel?: pulumi.Input<string>;
+    /**
+     * The import token.
+     */
+    importToken?: pulumi.Input<string>;
+    /**
+     * The id of key. When keyId is not specified, both keyringName and keyName must be specified.
+     */
+    keyId?: pulumi.Input<string>;
+    /**
+     * The name of key.
+     */
+    keyName?: pulumi.Input<string>;
+    /**
+     * The name of keyring.
+     */
+    keyringName?: pulumi.Input<string>;
+    /**
+     * The valid to timestamp of key material. Required when expirationModel is KEY_MATERIAL_EXPIRES. Unit: second.
+     */
+    validTo?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a KeyMaterial resource.
+ */
+export interface KeyMaterialArgs {
+    /**
+     * The encrypted key material, Base64 encoded.
+     */
+    encryptedKeyMaterial: pulumi.Input<string>;
+    /**
+     * The expiration model of key material. Valid values: `KEY_MATERIAL_DOES_NOT_EXPIRE`, `KEY_MATERIAL_EXPIRES`. Default value: `KEY_MATERIAL_DOES_NOT_EXPIRE`.
+     */
+    expirationModel?: pulumi.Input<string>;
+    /**
+     * The import token.
+     */
+    importToken: pulumi.Input<string>;
+    /**
+     * The id of key. When keyId is not specified, both keyringName and keyName must be specified.
+     */
+    keyId?: pulumi.Input<string>;
+    /**
+     * The name of key.
+     */
+    keyName?: pulumi.Input<string>;
+    /**
+     * The name of keyring.
+     */
+    keyringName?: pulumi.Input<string>;
+    /**
+     * The valid to timestamp of key material. Required when expirationModel is KEY_MATERIAL_EXPIRES. Unit: second.
+     */
+    validTo?: pulumi.Input<number>;
+}