Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.

# Referencia de tipos de claves
<a name="symm-asymm-compare"></a>

AWS KMS admite diferentes funciones para diferentes *tipos* de claves KMS. Por ejemplo, solo puede utilizar las [claves de KMS de cifrado simétricas](symm-asymm-choose-key-spec.md#symmetric-cmks) para [generar claves de datos simétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) y [pares de claves de datos asimétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairs.html). Además, la [importación del material de claves](importing-keys.md) y la [rotación automática de claves](rotate-keys.md) son compatibles únicamente con las claves de KMS de cifrado simétricas. Asimismo, solo puede crear claves de KMS de cifrado simétricas en un [almacén de claves personalizadas](key-store-overview.md#custom-key-store-overview). 

Esta referencia incluye dos tablas. 
+ La [tabla de tipos de clave](#key-type-table) muestra las AWS KMS operaciones que son válidas para las claves KMS de cifrado simétrico, las claves KMS asimétricas y las claves KMS HMAC. 
+ La [tabla de características especiales](#special-features-table) muestra las operaciones de AWS KMS que son válidas para las claves de KMS para varias regiones, las claves de KMS con material de claves importado y las claves de KMS de almacenes de claves personalizados.

## Tabla de tipos de claves
<a name="key-type-table"></a>

Es posible que tenga que desplazarse horizontal o verticalmente para ver todos los datos de esta tabla.


| AWS KMS Funcionamiento de la API | Claves de KMS de cifrado simétrico | Claves KMS HMAC | Claves de KMS asimétricas (ENCRYPT\$1DECRYPT) | Claves de KMS asimétricas (SIGN\$1VERIFY) | Claves KMS asimétricas (KEY\$1AGREEMENT) | 
| --- | --- | --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | Sí | Sí | Sí | Sí | Sí | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
| [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) |  Sí  | Sí |  Sí  |  Sí  | Sí | 
|  [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  Sí  | No |  Sí  | No | No | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`).  |  Sí  | Sí | Sí | Sí | Sí | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  | No | No | No | No | Sí | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  Sí Válido solo en claves de KMS con material (`Origin`es`AWS_KMS`) AWS KMS clave.  | No |  No  | No | No | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  Sí Válido solo en claves KMS con material (`Origin`es`AWS_KMS`) AWS KMS clave.  | No |  No  | No | No | 
|  [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  Sí  | No |  Sí  | No | No | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  Sí   | No |  No  | No | No | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) Genera un par de claves de datos asimétricos protegido por una clave de KMS de cifrado simétrica.  | Sí No es válido en claves de KMS en almacenes de claves personalizados. | No |  No  | No | No | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) Genera un par de claves de datos asimétricos protegido por una clave de KMS de cifrado simétrica.  |  Sí  No es válido en claves de KMS en almacenes de claves personalizados.  | No |  No  | No | No | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  Sí  | No |  No  | No | No | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) | No | Sí | No | No | No | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  Sí  |  Sí (`KeyRotationEnabled` siempre será `false`.)  |  Sí (`KeyRotationEnabled` siempre será `false`.)  |  Sí (`KeyRotationEnabled` siempre será `false`.)  |  Sí (`KeyRotationEnabled` siempre será `false`.)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`).  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html)  |  No  | No |  Sí  | Sí | Sí | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`).  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  | Sí | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  Sí  | No |  Sí  | No | No | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) - Válido solo en claves de varias regiones  |  Sí  | Sí |  Sí  |  Sí  | Sí | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  Sí  | Sí |  Sí  |  Sí  | Sí | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  | Sí Válido solo en claves KMS de cifrado simétrico administradas por el cliente con origen `AWS_KMS` o `EXTERNAL`. | No | No | No | No | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html)  |  No  | No |  No  | Sí | No | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) La clave de KMS actual y la nueva clave de KMS deben ser del mismo tipo (ambas simétricas o ambas asimétricas o ambas HMAC) y deben tener el mismo [uso de clave](create-keys.md#key-usage).  | Sí | Sí |  Sí  | Sí | Sí | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  Sí  | Sí |  Sí  | Sí | Sí | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) - Válido solo en claves de varias regiones  |  Sí  | Sí |  Sí  |  Sí  | Sí | 
|  [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html)  |  No  | No |  No  | Sí | No | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) | No | Sí | No | No | No | 

## Tabla de características especiales
<a name="special-features-table"></a>

En esta tabla se muestran las operaciones de AWS KMS API que se admiten en cada tipo de clave de *uso especial*. 

Al leer esta tabla, debe tener en cuenta las siguientes interacciones:
+ [Claves de varias regiones](multi-region-keys-overview.md): 
  + Las claves de varias regiones pueden ser claves de KMS de cifrado simétrico, claves de KMS asimétricas, claves de KMS HMAC y claves de KMS con material de claves importado.
  + No puede crear claves de varias regiones en un almacén de claves personalizado.
+ [Material de claves importado](importing-keys.md)
  + Puede importar material de claves de KMS de cifrado simétrico, claves de KMS asimétricas y claves HMAC de KMS.
  + Puede crear [claves de varias regiones con material de claves importado](multi-region-keys-overview.md).
  + No puede crear claves con material de claves importado en un almacén de claves personalizado. 
  + La rotación automática de claves `EnableKeyRotation`, `DisableKeyRotation`) no es compatible con las claves KMS con el material de claves importado.
  + La rotación de claves bajo demanda (`RotateKeyOnDemand`) se admite para las claves KMS de cifrado simétrico con material de clave importado.
+ [Almacenes de claves personalizados](key-store-overview.md#custom-key-store-overview)
  + Los almacenes de claves personalizados solo admiten claves KMS de cifrado simétricas.
  + Las operaciones simétricas en pares de claves asimétricas (`GenerateDataKeyPair`, `GenerateDataKeyPairWithoutPlaintext`) no se admiten en las claves de KMS de los almacenes de claves personalizados.
  + Las claves KMS de almacenes de claves personalizados no admiten la rotación automática de claves (`EnableKeyRotation`, `DisableKeyRotation`).
  + No puede crear claves de varias regiones en almacenes de claves personalizados.

Es posible que tenga que desplazarse horizontal o verticalmente para ver todos los datos de esta tabla.


| AWS KMS Funcionamiento de la API | Claves de varias regiones | Material de claves importado | Las claves KMS en un almacén de claves personalizado | 
| --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
| [ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) Puede utilizar `CreateKey` para crear una clave principal de varias regiones, una clave de KMS con material de claves importado o una clave de KMS en un almacén de claves personalizado. Para crear una clave de réplica de varias regiones, utilice `ReplicateKey`. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
|  [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo cuando `KeyUsage` es `KEY_AGREEMENT`)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo cuando `KeyUsage` es `KEY_AGREEMENT`)  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas con material (`Origin`es`AWS_KMS`) AWS KMS clave.  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo con claves de cifrado de KMS simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas con material (`Origin`es`AWS_KMS`) de AWS KMS clave.  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  Válido solo con claves de cifrado de KMS simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo con claves de cifrado de KMS simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo con claves de cifrado de KMS simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo con claves de cifrado de KMS simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Válido solo en claves HMAC de KMS |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` siempre será `false`.)  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) Válido solo para [claves de KMS asimétricas](symmetric-asymmetric.md).  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas con origen `AWS_KMS` u `EXTERNAL` origen.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves principales de varias regiones.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves principales de varias regiones.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas con origen `AWS_KMS` u `EXTERNAL` origen.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de cifrado simétricas.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) Válido solo cuando `KeyUsage` es `SIGN_VERIFY`.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) La clave de KMS actual y la nueva clave de KMS deben ser del mismo tipo (ambas simétricas o ambas asimétricas o ambas HMAC) y deben tener el mismo [uso de clave](create-keys.md#key-usage).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) Válido solo en claves de varias regiones.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
|  [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) Solo es válido cuando `KeyUsage` es `SIGN_VERIFY`.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Válido solo en claves HMAC de KMS |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) |