Generate and Recover Data Key
A 2-step recipe with Amazon KMS. We can help you get access.
Recipe · 2 steps
Generate and Recover Data Key
with Amazon KMS · Cybersecurity Management
Generate a data key then decrypt the encrypted copy to recover it.
- Generate a unique symmetric data key under the KMS key, returning both the plaintext key and its encrypted form.
- Decrypt the encrypted data key returned by generation to recover the original plaintext data key.
What you'll need to have ready
- KeyId: Identifies the KMS key that protects the data key.
- KeySpec: The length of the data key to generate (e.g. AES_256).
For your developer
Arazzo workflow amazon-kms:generate-and-recover-data-key, 2 operations: GenerateDataKey → Decrypt. Specs on APIs.io.