Die vorliegende Übersetzung wurde maschinell erstellt. Im Falle eines Konflikts oder eines Widerspruchs zwischen dieser übersetzten Fassung und der englischen Fassung (einschließlich infolge von Verzögerungen bei der Übersetzung) ist die englische Fassung maßgeblich.
# Schlüsseltypreferenz
AWS KMS unterstützt verschiedene Funktionen für verschiedene *Typen* von KMS-Schlüsseln. Sie können beispielsweise mit [KMS-Schlüsseln zur symmetrischen Verschlüsselung](symm-asymm-choose-key-spec.md#symmetric-cmks) nur [symmetrische Datenschlüssel](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) und [asymmetrische Datenschlüsselpaare](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairs.html) generieren. Außerdem werden das [Importieren von Schlüsselmaterial](importing-keys.md) und die [automatische Schlüsseldrehung](rotate-keys.md) nur für KMS-Schlüssel zur symmetrischen Verschlüsselung unterstützt, und Sie können in einem [benutzerdefinierten Schlüsselspeicher](key-store-overview.md#custom-key-store-overview) nur KMS-Schlüssel zur symmetrischen Verschlüsselung erstellen.
Diese Referenz enthält zwei Tabellen.
+ In der [Tabelle mit den Schlüsseltypen](#key-type-table) sind die AWS KMS Operationen aufgeführt, die für KMS-Schlüssel mit symmetrischer Verschlüsselung, asymmetrische KMS-Schlüssel und HMAC-KMS-Schlüssel gültig sind.
+ In der [Tabelle „Spezielle Funktionen“](#special-features-table) sind die AWS KMS Operationen aufgeführt, die für mehrere Regionen geltende KMS-Schlüssel, KMS-Schlüssel mit importiertem Schlüsselmaterial und KMS-Schlüssel in benutzerdefinierten Schlüsselspeichern gültig sind.
## Schlüsseltyp-Tabelle
Möglicherweise müssen Sie horizontal oder vertikal scrollen, um alle Daten in dieser Tabelle anzuzeigen.
| AWS KMS API-Betrieb | KMS-Schlüssel zur symmetrischen Verschlüsselung | HMAC-KMS-Schlüssel | Asymmetrische KMS-Schlüssel (ENCRYPT\$1DECRYPT) | Asymmetrische KMS-Schlüssel (SIGN\$1VERIFY) | Asymmetrische KMS-Schlüssel (KEY\$1AGREEMENT) |
| --- | --- | --- | --- | --- | --- |
| [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) | Ja | Ja | Ja | Ja | Ja |
| [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | Ja | Ja | Ja | Ja | Ja |
| [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) | Ja | Ja | Ja | Ja | Ja |
| [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) | Ja | Ja | Ja | Ja | Ja |
| [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) | Ja | Nein | Ja | Nein | Nein |
| [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) | Ja | Ja | Ja | Ja | Ja |
| [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) Gilt nur für KMS-Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`). | Ja | Ja | Ja | Ja | Ja |
| [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) | Nein | Nein | Nein | Nein | Ja |
| [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) | Ja | Ja | Ja | Ja | Ja |
| [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) | Ja | Ja | Ja | Ja | Ja |
| [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) | Ja Gilt nur für KMS-Schlüssel mit AWS KMS Schlüsselmaterial (`Origin`ist). `AWS_KMS` | Nein | Nein | Nein | Nein |
| [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) | Ja | Ja | Ja | Ja | Ja |
| [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) | Ja Gilt nur für KMS-Schlüssel mit AWS KMS Schlüsselmaterial (`Origin`ist`AWS_KMS`). | Nein | Nein | Nein | Nein |
| [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) | Ja | Nein | Ja | Nein | Nein |
| [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) | Ja | Nein | Nein | Nein | Nein |
| [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) Generierung eines asymmetrischen Datenschlüsselpaars, das durch einen KMS-Schlüssel mit symmetrischer Verschlüsselung geschützt ist. | Ja Gilt nicht für KMS-Schlüssel in benutzerdefinierten Schlüsselspeichern. | Nein | Nein | Nein | Nein |
| [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) Generierung eines asymmetrischen Datenschlüsselpaars, das durch einen KMS-Schlüssel mit symmetrischer Verschlüsselung geschützt ist. | Ja Gilt nicht für KMS-Schlüssel in benutzerdefinierten Schlüsselspeichern. | Nein | Nein | Nein | Nein |
| [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) | Ja | Nein | Nein | Nein | Nein |
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) | Nein | Ja | Nein | Nein | Nein |
| [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) | Ja | Ja | Ja | Ja | Ja |
| [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) | Ja | Ja (`KeyRotationEnabled` ist immer `false`.) | Ja (`KeyRotationEnabled` ist immer `false`.) | Ja (`KeyRotationEnabled` ist immer `false`.) | Ja (`KeyRotationEnabled` ist immer `false`.) |
| [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) Gilt nur für KMS-Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`). | Ja | Ja | Ja | Ja | Ja |
| [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) | Nein | Nein | Ja | Ja | Ja |
| [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) Gilt nur für KMS-Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`). | Ja | Ja | Ja | Ja | Ja |
| [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) | Ja | Ja | Ja | Ja | Ja |
| [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) | Ja | Ja | Ja | Ja | Ja |
| [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) | Ja | Ja | Ja | Ja | Ja |
| [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) | Ja | Ja (Das `Rotations` Feld wird immer Null oder leer sein.) | Ja (Das `Rotations` Feld wird immer Null oder leer sein.) | Ja (Das `Rotations` Feld wird immer Null oder leer sein.) | Ja (Das `Rotations` Feld wird immer Null oder leer sein.) |
| [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) | Ja | Ja | Ja | Ja | Ja |
| [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) | Ja | Ja | Ja | Ja | Ja |
| [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) | Ja | Ja | Ja | Ja | Ja |
| [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) | Ja | Nein | Ja | Nein | Nein |
| [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) - gilt nur für multiregionale Schlüssel | Ja | Ja | Ja | Ja | Ja |
| [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) | Ja | Ja | Ja | Ja | Ja |
| [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) | Ja | Ja | Ja | Ja | Ja |
| [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) | Ja Gilt nur für vom Kunden verwaltete KMS-Schlüssel mit symmetrischer Verschlüsselung `AWS_KMS` ohne `EXTERNAL` Herkunft. | Nein | Nein | Nein | Nein |
| [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) | Ja | Ja | Ja | Ja | Ja |
| [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) | Nein | Nein | Nein | Ja | Nein |
| [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) | Ja | Ja | Ja | Ja | Ja |
| [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) | Ja | Ja | Ja | Ja | Ja |
| [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) Der aktuelle KMS-Schlüssel und der neue KMS-Schlüssel müssen vom selben Typ sein (beide symmetrisch oder beide asymmetrisch oder beide HMAC) und die gleiche [Schlüsselnutzung](create-keys.md#key-usage) aufweisen. | Ja | Ja | Ja | Ja | Ja |
| [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) | Ja | Ja | Ja | Ja | Ja |
| [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) - gilt nur für multiregionale Schlüssel | Ja | Ja | Ja | Ja | Ja |
| [Verify](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) | Nein | Nein | Nein | Ja | Nein |
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) | Nein | Ja | Nein | Nein | Nein |
## Tabelle „Spezielle Funktionen“
In dieser Tabelle sind die AWS KMS API-Operationen aufgeführt, die für jeden Typ von *Spezialschlüsseln* unterstützt werden.
Achten Sie beim Lesen dieser Tabelle auf die folgenden Interaktionen:
+ [Multiregionale Schlüssel](multi-region-keys-overview.md):
+ Bei multiregionalen Schlüsseln kann es sich um KMS-Schlüssel mit symmetrischer Verschlüsselung, KMS-Schlüssel mit asymmetrischer Verschlüsselung, HMAC-KMS-Schlüssel und KMS-Schlüssel mit importiertem Schlüsselmaterial handeln.
+ Sie können keine multiregionale Schlüssel in einem benutzerdefinierten Schlüsselspeicher verwenden.
+ [Importiertes Schlüsselmaterial](importing-keys.md)
+ Sie können Schlüsselmaterial für symmetrisch verschlüsselte KMS-Schlüssel, asymmetrische KMS-Schlüssel und HMAC-KMS-Schlüssel importieren.
+ Sie können [multiregionale Schlüssel mit importiertem Schlüsselmaterial](multi-region-keys-overview.md) erstellen.
+ Sie können keine Schlüssel mit importiertem Schlüsselmaterial oder in einem benutzerdefinierten Schlüsselspeicher erstellen.
+ Automatische Schlüsseldrehung (`EnableKeyRotation`, `DisableKeyRotation`) wird für KMS-Schlüssel oder KMS-Schlüssel mit importiertem Schlüsselmaterial nicht unterstützt.
+ Die On-Demand-Schlüsselrotation (`RotateKeyOnDemand`) wird für KMS-Schlüssel mit symmetrischer Verschlüsselung mit importiertem Schlüsselmaterial unterstützt.
+ [Benutzerdefinierte Schlüsselspeicher](key-store-overview.md#custom-key-store-overview)
+ Benutzerdefinierte Schlüsselspeicher unterstützen nur KMS-Schlüssel mit symmetrischer Verschlüsselung.
+ Symmetrische Operationen mit asymmetrischen Schlüsselpaaren (`GenerateDataKeyPair`, `GenerateDataKeyPairWithoutPlaintext`) werden für KMS-Schlüssel in benutzerdefinierten Schlüsselspeichern nicht unterstützt.
+ Automatische Schlüsselrotation (`EnableKeyRotation`, `DisableKeyRotation`) wird bei KMS-Schlüsseln in benutzerdefinierten Schlüsselspeichern nicht unterstützt.
+ Sie können keine multiregionalen Schlüssel in benutzerdefinierten Schlüsselspeichern erstellen.
Möglicherweise müssen Sie horizontal oder vertikal scrollen, um alle Daten in dieser Tabelle anzuzeigen.
| AWS KMS API-Betrieb | Multiregionale Schlüssel | Importiertes Schlüsselmaterial | KMS-Schlüssel in einem benutzerdefinierten Schlüsselspeicher |
| --- | --- | --- | --- |
| [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) Sie können `CreateKey` verwenden, um einen multiregionalen Primärschlüssel, einen KMS-Schlüssel mit importiertem Schlüsselmaterial oder einen KMS-Schlüssel in einem benutzerdefinierten Schlüsselspeicher zu erstellen. Verwenden Sie `ReplicateKey` zum Erstellen eines multiregionalen Replikatschlüssels. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur, wenn `KeyUsage` `ENCRYPT_DECRYPT` ist. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gültig (nur wenn `KeyUsage` ist`KEY_AGREEMENT`) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gültig nur wenn `KEY_AGREEMENT` (`KeyUsage`ist) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel mit AWS KMS Schlüsselmaterial (`Origin`ist`AWS_KMS`). | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für KMS-Schlüssel mit symmetrischer Verschlüsselung | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel mit AWS KMS Schlüsselmaterial (`Origin`ist`AWS_KMS`). | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur, wenn `KeyUsage` `ENCRYPT_DECRYPT` ist. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für KMS-Schlüssel mit symmetrischer Verschlüsselung | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für KMS-Schlüssel mit symmetrischer Verschlüsselung | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für KMS-Schlüssel mit symmetrischer Verschlüsselung | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für KMS-Schlüssel mit symmetrischer Verschlüsselung | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Gilt nur für HMAC-KMS-Schlüssel | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` ist immer `false`.) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`). | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) Gilt nur für [asymmetrische KMS-Schlüssel](symmetric-asymmetric.md). | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für Schlüssel mit importiertem Schlüsselmaterial (`Origin` ist `EXTERNAL`). | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel mit Ursprung `AWS_KMS` oder `EXTERNAL` Ursprung. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur, wenn `KeyUsage` `ENCRYPT_DECRYPT` ist. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für multiregionale Primärschlüssel. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für multiregionale Primärschlüssel. | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel mit Ursprung `AWS_KMS` oder `EXTERNAL` Herkunft. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für symmetrische Verschlüsselungsschlüssel. | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) Gilt nur, wenn `KeyUsage` `SIGN_VERIFY` ist. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) - Der aktuelle KMS-Schlüssel und der neue KMS-Schlüssel müssen vom selben Typ sein (beide symmetrisch oder beide asymmetrisch oder beide HMAC) und die gleiche [Schlüsselnutzung](create-keys.md#key-usage) aufweisen. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) |
| [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) Gilt nur für multiregionale Schlüssel. | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [Verify](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) Gilt nur, wenn `KeyUsage` `SIGN_VERIFY` ist. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Gilt nur für HMAC-KMS-Schlüssel | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/de_de/kms/latest/developerguide/images/icon-failed.png) |