One Hat Cyber Team

Your IP: 216.73.216.133
Server IP: 185.119.109.197
Server: Linux managedhosting.chostar.me 5.15.0-160-generic #170-Ubuntu SMP Wed Oct 1 10:06:56 UTC 2025 x86_64
Server Software: Apache
PHP Version: 8.1.33
Buat File | Buat Folder

Dir : ~/usr/share/doc/awscli/examples/kms/

View File Name : get-parameters-for-import.rst

**To get the items required to import key material into a CMK**

The following ``get-parameters-for-import`` example gets the public key and import token that you need to import key material into a CMK. When you use the ``import-key-material`` command, be sure to use the import token and key material encrypted by the public key that were returned in the same ``get-parameters-for-import`` command. Also, the wrapping algorithm that you specify in this command must be one that you use to encrypt the key material with the public key.

To specify the CMK, use the ``key-id`` parameter. This example uses an key ID, but you can use a key ID or key ARN in this command. ::

    aws kms get-parameters-for-import \
        --key-id 1234abcd-12ab-34cd-56ef-1234567890ab \
        --wrapping-algorithm RSAES_OAEP_SHA_256 \
        --wrapping-key-spec RSA_2048

Output::

    {
        "KeyId": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab",
        "PublicKey": "<public key base64 encoded data>",
        "ImportToken": "<import token base64 encoded data>",
        "ParametersValidTo": 1593893322.32
    }

For more information, see `Download the public key and import token <https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-get-public-key-and-token.html>`__ in the *AWS Key Management Service Developer Guide*.