Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.

# Tindakan, sumber daya, dan kunci kondisi untuk Layanan Manajemen AWS Kunci
<a name="list_awskeymanagementservice"></a>

AWS Layanan Manajemen Kunci (awalan layanan:`kms`) menyediakan sumber daya khusus layanan, tindakan, dan kunci konteks kondisi berikut untuk digunakan dalam kebijakan izin IAM.

Referensi:
+ Pelajari cara [mengonfigurasi layanan ini](https://docs.aws.amazon.com/kms/latest/developerguide/overview.html).
+ Lihat daftar [Operasi API yang tersedia untuk layanan ini](https://docs.aws.amazon.com/kms/latest/APIReference/).
+ Pelajari cara mengamankan layanan ini dan sumber dayanya dengan [menggunakan kebijakan izin](https://docs.aws.amazon.com/kms/latest/developerguide/control-access.html) IAM.

**Topics**
+ [Tindakan yang ditentukan oleh Layanan Manajemen AWS Kunci](#awskeymanagementservice-actions-as-permissions)
+ [Jenis sumber daya yang ditentukan oleh Layanan Manajemen AWS Kunci](#awskeymanagementservice-resources-for-iam-policies)
+ [Kunci kondisi untuk Layanan Manajemen AWS Kunci](#awskeymanagementservice-policy-keys)

## Tindakan yang ditentukan oleh Layanan Manajemen AWS Kunci
<a name="awskeymanagementservice-actions-as-permissions"></a>

Anda dapat menyebutkan tindakan berikut dalam elemen `Action` pernyataan kebijakan IAM. Gunakan kebijakan untuk memberikan izin untuk melaksanakan operasi dalam AWS. Saat Anda menggunakan sebuah tindakan dalam sebuah kebijakan, Anda biasanya mengizinkan atau menolak akses ke operasi API atau perintah CLI dengan nama yang sama. Namun, dalam beberapa kasus, satu tindakan tunggal mengontrol akses ke lebih dari satu operasi. Atau, beberapa operasi memerlukan beberapa tindakan yang berbeda.

Kolom **tingkat akses** pada tabel Tindakan menjelaskan cara tindakan diklasifikasikan (Daftar, Baca, Manajemen izin, atau Penandaan). Klasifikasi ini dapat membantu Anda memahami tingkat akses yang diberikan tindakan saat Anda menggunakannya dalam kebijakan. Untuk informasi selengkapnya tentang tingkat akses, lihat [Tingkat akses dalam ringkasan kebijakan](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html).

Kolom **tipe sumber daya** pada tabel Tindakan menunjukkan apakah setiap tindakan mendukung izin tingkat sumber daya. Jika tidak ada nilai untuk kolom ini, Anda harus menentukan semua sumber daya (“\*”) yang berlaku kebijakan dalam `Resource` elemen pernyataan kebijakan Anda. Jika kolom mencantumkan jenis sumber daya, maka Anda dapat menyebutkan ARN dengan jenis tersebut dalam sebuah pernyataan dengan tindakan tersebut. Jika tindakan memiliki satu atau lebih sumber daya yang diperlukan, pemanggil harus memiliki izin untuk menggunakan tindakan dengan sumber daya tersebut. Sumber daya yang diperlukan ditunjukkan dalam tabel dengan tanda bintang (\*). Jika Anda membatasi akses sumber daya dengan `Resource` elemen dalam kebijakan IAM, Anda harus menyertakan ARN atau pola untuk setiap jenis sumber daya yang diperlukan. Beberapa tindakan mendukung berbagai jenis sumber daya. Jika jenis sumber daya opsional (tidak ditunjukkan sesuai kebutuhan), maka Anda dapat memilih untuk menggunakan salah satu jenis sumber daya opsional.

Kolom **Condition keys** pada tabel Actions menyertakan kunci yang dapat Anda tentukan dalam `Condition` elemen pernyataan kebijakan. Untuk informasi selengkapnya tentang kunci kondisi yang terkait dengan sumber daya untuk layanan, lihat kolom **Kunci kondisi** pada tabel Jenis sumber daya.

Kolom **Tindakan dependen** pada tabel Tindakan menunjukkan izin tambahan yang mungkin diperlukan untuk berhasil memanggil tindakan. Izin ini mungkin diperlukan selain izin untuk tindakan itu sendiri. Saat tindakan menentukan tindakan dependen, dependensi tersebut mungkin berlaku untuk sumber daya tambahan yang ditentukan untuk tindakan tersebut, bukan hanya sumber daya pertama yang tercantum dalam tabel.

**catatan**  
Kunci kondisi sumber daya tercantum dalam tabel [Jenis sumber daya](#awskeymanagementservice-resources-for-iam-policies). Anda dapat menemukan tautan ke jenis sumber daya yang berlaku untuk tindakan di kolom **Jenis sumber daya (\*wajib)** pada tabel Tindakan. Jenis sumber daya dalam tabel Jenis sumber daya menyertakan kolom **Kunci kondisi**, yang merupakan kunci kondisi sumber daya yang berlaku untuk tindakan dalam tabel Tindakan.

Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tindakan](reference_policies_actions-resources-contextkeys.html#actions_table).


****  


- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) **
  - **Deskripsi:** Mengontrol izin untuk membatalkan penghapusan kunci KMS yang dijadwalkan AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ConnectCustomKeyStore.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ConnectCustomKeyStore.html) **
  - **Deskripsi:** Mengontrol izin untuk menghubungkan atau menghubungkan kembali penyimpanan kunci kustom ke klaster AWS CloudHSM terkait atau pengelola kunci eksternal di luar AWS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) **
  - **Deskripsi:** Mengontrol izin untuk membuat alias untuk kunci AWS KMS. Alias adalah nama ramah opsional yang dapat Anda kaitkan dengan kunci KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-alias](#awskeymanagementservice-alias)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateCustomKeyStore.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateCustomKeyStore.html) **
  - **Deskripsi:** Mengontrol izin untuk membuat penyimpanan kunci kustom yang didukung oleh klaster AWS CloudHSM atau pengelola kunci eksternal di luar AWS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:**  cloudhsm:DescribeClusters <br /> ec2:DescribeVpcEndpointServices <br /> iam:CreateServiceLinkedRole 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) **
  - **Deskripsi:** Mengontrol izin untuk menambahkan hibah ke kunci AWS KMS. Anda dapat menggunakan hibah untuk menambahkan izin tanpa mengubah kebijakan utama atau kebijakan IAM
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_GrantConstraintType](#awskeymanagementservice-kms_GrantConstraintType) <br /> [#awskeymanagementservice-kms_GranteePrincipal](#awskeymanagementservice-kms_GranteePrincipal) <br /> [#awskeymanagementservice-kms_GrantIsForAWSResource](#awskeymanagementservice-kms_GrantIsForAWSResource) <br /> [#awskeymanagementservice-kms_GrantOperations](#awskeymanagementservice-kms_GrantOperations) <br /> [#awskeymanagementservice-kms_RetiringPrincipal](#awskeymanagementservice-kms_RetiringPrincipal) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) **
  - **Deskripsi:** Mengontrol izin untuk membuat kunci AWS KMS yang dapat digunakan untuk melindungi kunci data dan informasi sensitif lainnya
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-aws_ResourceTag___TagKey_](#awskeymanagementservice-aws_ResourceTag___TagKey_) <br /> [#awskeymanagementservice-aws_RequestTag___TagKey_](#awskeymanagementservice-aws_RequestTag___TagKey_) <br /> [#awskeymanagementservice-aws_TagKeys](#awskeymanagementservice-aws_TagKeys) <br /> [#awskeymanagementservice-kms_BypassPolicyLockoutSafetyCheck](#awskeymanagementservice-kms_BypassPolicyLockoutSafetyCheck) <br /> [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_KeySpec](#awskeymanagementservice-kms_KeySpec) <br /> [#awskeymanagementservice-kms_KeyUsage](#awskeymanagementservice-kms_KeyUsage) <br /> [#awskeymanagementservice-kms_KeyOrigin](#awskeymanagementservice-kms_KeyOrigin) <br /> [#awskeymanagementservice-kms_MultiRegion](#awskeymanagementservice-kms_MultiRegion) <br /> [#awskeymanagementservice-kms_MultiRegionKeyType](#awskeymanagementservice-kms_MultiRegionKeyType) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService) 
  - **Tindakan bergantung:**  iam:CreateServiceLinkedRole <br /> kms:PutKeyPolicy <br /> kms:TagResource 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) **
  - **Deskripsi:** Mengontrol izin untuk mendekripsi ciphertext yang dienkripsi di bawah kunci KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RecipientAttestation_ImageSha384](#awskeymanagementservice-kms_RecipientAttestation_ImageSha384) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR0](#awskeymanagementservice-kms_RecipientAttestation_PCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR1](#awskeymanagementservice-kms_RecipientAttestation_PCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR2](#awskeymanagementservice-kms_RecipientAttestation_PCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR3](#awskeymanagementservice-kms_RecipientAttestation_PCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR4](#awskeymanagementservice-kms_RecipientAttestation_PCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR5](#awskeymanagementservice-kms_RecipientAttestation_PCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR6](#awskeymanagementservice-kms_RecipientAttestation_PCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR7](#awskeymanagementservice-kms_RecipientAttestation_PCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR8](#awskeymanagementservice-kms_RecipientAttestation_PCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR9](#awskeymanagementservice-kms_RecipientAttestation_PCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR10](#awskeymanagementservice-kms_RecipientAttestation_PCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR11](#awskeymanagementservice-kms_RecipientAttestation_PCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR12](#awskeymanagementservice-kms_RecipientAttestation_PCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR13](#awskeymanagementservice-kms_RecipientAttestation_PCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR14](#awskeymanagementservice-kms_RecipientAttestation_PCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR15](#awskeymanagementservice-kms_RecipientAttestation_PCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR16](#awskeymanagementservice-kms_RecipientAttestation_PCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR17](#awskeymanagementservice-kms_RecipientAttestation_PCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR18](#awskeymanagementservice-kms_RecipientAttestation_PCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR19](#awskeymanagementservice-kms_RecipientAttestation_PCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR20](#awskeymanagementservice-kms_RecipientAttestation_PCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR21](#awskeymanagementservice-kms_RecipientAttestation_PCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR22](#awskeymanagementservice-kms_RecipientAttestation_PCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR23](#awskeymanagementservice-kms_RecipientAttestation_PCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR24](#awskeymanagementservice-kms_RecipientAttestation_PCR24) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR25](#awskeymanagementservice-kms_RecipientAttestation_PCR25) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR26](#awskeymanagementservice-kms_RecipientAttestation_PCR26) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR27](#awskeymanagementservice-kms_RecipientAttestation_PCR27) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR28](#awskeymanagementservice-kms_RecipientAttestation_PCR28) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR29](#awskeymanagementservice-kms_RecipientAttestation_PCR29) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR30](#awskeymanagementservice-kms_RecipientAttestation_PCR30) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR31](#awskeymanagementservice-kms_RecipientAttestation_PCR31) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) **
  - **Deskripsi:** Mengontrol izin untuk menghapus alias. Alias adalah nama ramah opsional yang dapat Anda kaitkan dengan kunci AWS KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-alias](#awskeymanagementservice-alias)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteCustomKeyStore.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteCustomKeyStore.html) **
  - **Deskripsi:** Mengontrol izin untuk menghapus toko kunci khusus
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) **
  - **Deskripsi:** Mengontrol izin untuk menghapus materi kriptografi yang Anda impor ke kunci AWS KMS. Tindakan ini membuat kunci tidak dapat digunakan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS yang ditentukan untuk mendapatkan rahasia bersama
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_KeyAgreementAlgorithm](#awskeymanagementservice-kms_KeyAgreementAlgorithm) <br /> [#awskeymanagementservice-kms_RecipientAttestation_ImageSha384](#awskeymanagementservice-kms_RecipientAttestation_ImageSha384) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR0](#awskeymanagementservice-kms_RecipientAttestation_PCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR1](#awskeymanagementservice-kms_RecipientAttestation_PCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR2](#awskeymanagementservice-kms_RecipientAttestation_PCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR3](#awskeymanagementservice-kms_RecipientAttestation_PCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR4](#awskeymanagementservice-kms_RecipientAttestation_PCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR5](#awskeymanagementservice-kms_RecipientAttestation_PCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR6](#awskeymanagementservice-kms_RecipientAttestation_PCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR7](#awskeymanagementservice-kms_RecipientAttestation_PCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR8](#awskeymanagementservice-kms_RecipientAttestation_PCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR9](#awskeymanagementservice-kms_RecipientAttestation_PCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR10](#awskeymanagementservice-kms_RecipientAttestation_PCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR11](#awskeymanagementservice-kms_RecipientAttestation_PCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR12](#awskeymanagementservice-kms_RecipientAttestation_PCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR13](#awskeymanagementservice-kms_RecipientAttestation_PCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR14](#awskeymanagementservice-kms_RecipientAttestation_PCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR15](#awskeymanagementservice-kms_RecipientAttestation_PCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR16](#awskeymanagementservice-kms_RecipientAttestation_PCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR17](#awskeymanagementservice-kms_RecipientAttestation_PCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR18](#awskeymanagementservice-kms_RecipientAttestation_PCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR19](#awskeymanagementservice-kms_RecipientAttestation_PCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR20](#awskeymanagementservice-kms_RecipientAttestation_PCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR21](#awskeymanagementservice-kms_RecipientAttestation_PCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR22](#awskeymanagementservice-kms_RecipientAttestation_PCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR23](#awskeymanagementservice-kms_RecipientAttestation_PCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR24](#awskeymanagementservice-kms_RecipientAttestation_PCR24) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR25](#awskeymanagementservice-kms_RecipientAttestation_PCR25) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR26](#awskeymanagementservice-kms_RecipientAttestation_PCR26) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR27](#awskeymanagementservice-kms_RecipientAttestation_PCR27) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR28](#awskeymanagementservice-kms_RecipientAttestation_PCR28) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR29](#awskeymanagementservice-kms_RecipientAttestation_PCR29) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR30](#awskeymanagementservice-kms_RecipientAttestation_PCR30) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR31](#awskeymanagementservice-kms_RecipientAttestation_PCR31) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeCustomKeyStores.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeCustomKeyStores.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat informasi terperinci tentang toko kunci kustom di akun dan wilayah
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat informasi rinci tentang kunci AWS KMS
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) **
  - **Deskripsi:** Mengontrol izin untuk menonaktifkan kunci AWS KMS, yang mencegahnya digunakan dalam operasi kriptografi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_TrailingDaysWithoutKeyUsage](#awskeymanagementservice-kms_TrailingDaysWithoutKeyUsage) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) **
  - **Deskripsi:** Mengontrol izin untuk menonaktifkan rotasi otomatis kunci AWS KMS yang dikelola pelanggan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_DisconnectCustomKeyStore.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisconnectCustomKeyStore.html) **
  - **Deskripsi:** Mengontrol izin untuk memutuskan penyimpanan kunci kustom dari klaster AWS CloudHSM terkait atau pengelola kunci eksternal di luar AWS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) **
  - **Deskripsi:** Mengontrol izin untuk mengubah status kunci AWS KMS menjadi diaktifkan. Ini memungkinkan kunci KMS untuk digunakan dalam operasi kriptografi
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) **
  - **Deskripsi:** Mengontrol izin untuk mengaktifkan rotasi otomatis materi kriptografi dalam kunci AWS KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_RotationPeriodInDays](#awskeymanagementservice-kms_RotationPeriodInDays) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS yang ditentukan untuk mengenkripsi data dan kunci data
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) **
  - **Deskripsi:** Kontrol izin untuk menggunakan kunci AWS KMS untuk menghasilkan kunci data. Anda dapat menggunakan kunci data untuk mengenkripsi data di luar KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RecipientAttestation_ImageSha384](#awskeymanagementservice-kms_RecipientAttestation_ImageSha384) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR0](#awskeymanagementservice-kms_RecipientAttestation_PCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR1](#awskeymanagementservice-kms_RecipientAttestation_PCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR2](#awskeymanagementservice-kms_RecipientAttestation_PCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR3](#awskeymanagementservice-kms_RecipientAttestation_PCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR4](#awskeymanagementservice-kms_RecipientAttestation_PCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR5](#awskeymanagementservice-kms_RecipientAttestation_PCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR6](#awskeymanagementservice-kms_RecipientAttestation_PCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR7](#awskeymanagementservice-kms_RecipientAttestation_PCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR8](#awskeymanagementservice-kms_RecipientAttestation_PCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR9](#awskeymanagementservice-kms_RecipientAttestation_PCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR10](#awskeymanagementservice-kms_RecipientAttestation_PCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR11](#awskeymanagementservice-kms_RecipientAttestation_PCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR12](#awskeymanagementservice-kms_RecipientAttestation_PCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR13](#awskeymanagementservice-kms_RecipientAttestation_PCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR14](#awskeymanagementservice-kms_RecipientAttestation_PCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR15](#awskeymanagementservice-kms_RecipientAttestation_PCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR16](#awskeymanagementservice-kms_RecipientAttestation_PCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR17](#awskeymanagementservice-kms_RecipientAttestation_PCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR18](#awskeymanagementservice-kms_RecipientAttestation_PCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR19](#awskeymanagementservice-kms_RecipientAttestation_PCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR20](#awskeymanagementservice-kms_RecipientAttestation_PCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR21](#awskeymanagementservice-kms_RecipientAttestation_PCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR22](#awskeymanagementservice-kms_RecipientAttestation_PCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR23](#awskeymanagementservice-kms_RecipientAttestation_PCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR24](#awskeymanagementservice-kms_RecipientAttestation_PCR24) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR25](#awskeymanagementservice-kms_RecipientAttestation_PCR25) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR26](#awskeymanagementservice-kms_RecipientAttestation_PCR26) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR27](#awskeymanagementservice-kms_RecipientAttestation_PCR27) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR28](#awskeymanagementservice-kms_RecipientAttestation_PCR28) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR29](#awskeymanagementservice-kms_RecipientAttestation_PCR29) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR30](#awskeymanagementservice-kms_RecipientAttestation_PCR30) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR31](#awskeymanagementservice-kms_RecipientAttestation_PCR31) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS untuk menghasilkan pasangan kunci data
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_DataKeyPairSpec](#awskeymanagementservice-kms_DataKeyPairSpec) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RecipientAttestation_ImageSha384](#awskeymanagementservice-kms_RecipientAttestation_ImageSha384) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR0](#awskeymanagementservice-kms_RecipientAttestation_PCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR1](#awskeymanagementservice-kms_RecipientAttestation_PCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR2](#awskeymanagementservice-kms_RecipientAttestation_PCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR3](#awskeymanagementservice-kms_RecipientAttestation_PCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR4](#awskeymanagementservice-kms_RecipientAttestation_PCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR5](#awskeymanagementservice-kms_RecipientAttestation_PCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR6](#awskeymanagementservice-kms_RecipientAttestation_PCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR7](#awskeymanagementservice-kms_RecipientAttestation_PCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR8](#awskeymanagementservice-kms_RecipientAttestation_PCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR9](#awskeymanagementservice-kms_RecipientAttestation_PCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR10](#awskeymanagementservice-kms_RecipientAttestation_PCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR11](#awskeymanagementservice-kms_RecipientAttestation_PCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR12](#awskeymanagementservice-kms_RecipientAttestation_PCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR13](#awskeymanagementservice-kms_RecipientAttestation_PCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR14](#awskeymanagementservice-kms_RecipientAttestation_PCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR15](#awskeymanagementservice-kms_RecipientAttestation_PCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR16](#awskeymanagementservice-kms_RecipientAttestation_PCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR17](#awskeymanagementservice-kms_RecipientAttestation_PCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR18](#awskeymanagementservice-kms_RecipientAttestation_PCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR19](#awskeymanagementservice-kms_RecipientAttestation_PCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR20](#awskeymanagementservice-kms_RecipientAttestation_PCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR21](#awskeymanagementservice-kms_RecipientAttestation_PCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR22](#awskeymanagementservice-kms_RecipientAttestation_PCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR23](#awskeymanagementservice-kms_RecipientAttestation_PCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR24](#awskeymanagementservice-kms_RecipientAttestation_PCR24) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR25](#awskeymanagementservice-kms_RecipientAttestation_PCR25) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR26](#awskeymanagementservice-kms_RecipientAttestation_PCR26) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR27](#awskeymanagementservice-kms_RecipientAttestation_PCR27) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR28](#awskeymanagementservice-kms_RecipientAttestation_PCR28) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR29](#awskeymanagementservice-kms_RecipientAttestation_PCR29) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR30](#awskeymanagementservice-kms_RecipientAttestation_PCR30) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR31](#awskeymanagementservice-kms_RecipientAttestation_PCR31) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS untuk menghasilkan pasangan kunci data. Berbeda dengan GenerateDataKeyPair operasi, operasi ini mengembalikan kunci pribadi terenkripsi tanpa salinan teks biasa
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_DataKeyPairSpec](#awskeymanagementservice-kms_DataKeyPairSpec) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS untuk menghasilkan kunci data. Berbeda dengan GenerateDataKey operasi, operasi ini mengembalikan kunci data terenkripsi tanpa versi plaintext dari kunci data
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS untuk menghasilkan kode otentikasi pesan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_MacAlgorithm](#awskeymanagementservice-kms_MacAlgorithm) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateRandom.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateRandom.html) **
  - **Deskripsi:** Mengontrol izin untuk mendapatkan string byte acak yang aman secara kriptografis dari KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_RecipientAttestation_ImageSha384](#awskeymanagementservice-kms_RecipientAttestation_ImageSha384) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23](#awskeymanagementservice-kms_RecipientAttestation_NitroTPMPCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR0](#awskeymanagementservice-kms_RecipientAttestation_PCR0) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR1](#awskeymanagementservice-kms_RecipientAttestation_PCR1) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR2](#awskeymanagementservice-kms_RecipientAttestation_PCR2) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR3](#awskeymanagementservice-kms_RecipientAttestation_PCR3) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR4](#awskeymanagementservice-kms_RecipientAttestation_PCR4) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR5](#awskeymanagementservice-kms_RecipientAttestation_PCR5) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR6](#awskeymanagementservice-kms_RecipientAttestation_PCR6) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR7](#awskeymanagementservice-kms_RecipientAttestation_PCR7) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR8](#awskeymanagementservice-kms_RecipientAttestation_PCR8) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR9](#awskeymanagementservice-kms_RecipientAttestation_PCR9) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR10](#awskeymanagementservice-kms_RecipientAttestation_PCR10) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR11](#awskeymanagementservice-kms_RecipientAttestation_PCR11) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR12](#awskeymanagementservice-kms_RecipientAttestation_PCR12) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR13](#awskeymanagementservice-kms_RecipientAttestation_PCR13) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR14](#awskeymanagementservice-kms_RecipientAttestation_PCR14) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR15](#awskeymanagementservice-kms_RecipientAttestation_PCR15) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR16](#awskeymanagementservice-kms_RecipientAttestation_PCR16) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR17](#awskeymanagementservice-kms_RecipientAttestation_PCR17) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR18](#awskeymanagementservice-kms_RecipientAttestation_PCR18) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR19](#awskeymanagementservice-kms_RecipientAttestation_PCR19) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR20](#awskeymanagementservice-kms_RecipientAttestation_PCR20) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR21](#awskeymanagementservice-kms_RecipientAttestation_PCR21) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR22](#awskeymanagementservice-kms_RecipientAttestation_PCR22) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR23](#awskeymanagementservice-kms_RecipientAttestation_PCR23) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR24](#awskeymanagementservice-kms_RecipientAttestation_PCR24) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR25](#awskeymanagementservice-kms_RecipientAttestation_PCR25) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR26](#awskeymanagementservice-kms_RecipientAttestation_PCR26) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR27](#awskeymanagementservice-kms_RecipientAttestation_PCR27) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR28](#awskeymanagementservice-kms_RecipientAttestation_PCR28) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR29](#awskeymanagementservice-kms_RecipientAttestation_PCR29) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR30](#awskeymanagementservice-kms_RecipientAttestation_PCR30) <br /> [#awskeymanagementservice-kms_RecipientAttestation_PCR31](#awskeymanagementservice-kms_RecipientAttestation_PCR31) 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyLastUsage.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyLastUsage.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat penggunaan terakhir dari kunci AWS KMS
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat kebijakan kunci untuk kunci AWS KMS yang ditentukan
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat status rotasi kunci untuk kunci AWS KMS
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) **
  - **Deskripsi:** Mengontrol izin untuk mendapatkan data yang diperlukan untuk mengimpor materi kriptografi ke dalam kunci yang dikelola pelanggan, termasuk kunci publik dan token impor
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService) <br /> [#awskeymanagementservice-kms_WrappingAlgorithm](#awskeymanagementservice-kms_WrappingAlgorithm) <br /> [#awskeymanagementservice-kms_WrappingKeySpec](#awskeymanagementservice-kms_WrappingKeySpec)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) **
  - **Deskripsi:** Mengontrol izin untuk mengunduh kunci publik kunci AWS KMS asimetris
  - **Tingkat akses:** Baca
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) **
  - **Deskripsi:** Mengontrol izin untuk mengimpor materi kriptografi ke kunci AWS KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ExpirationModel](#awskeymanagementservice-kms_ExpirationModel) <br /> [#awskeymanagementservice-kms_ValidTo](#awskeymanagementservice-kms_ValidTo) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat alias yang ditentukan dalam akun. Alias adalah nama ramah opsional yang dapat Anda kaitkan dengan kunci AWS KMS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat semua hibah untuk kunci AWS KMS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_GrantIsForAWSResource](#awskeymanagementservice-kms_GrantIsForAWSResource) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat nama kebijakan kunci untuk kunci AWS KMS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat daftar materi utama untuk kunci AWS KMS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat ID kunci dan Nama Sumber Daya Amazon (ARN) dari semua kunci AWS KMS di akun
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat semua tag yang dilampirkan ke kunci AWS KMS
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) **
  - **Deskripsi:** Mengontrol izin untuk melihat hibah di mana prinsipal yang ditentukan adalah kepala sekolah yang pensiun. Kepala sekolah lain mungkin dapat mempensiunkan hibah dan kepala sekolah ini mungkin dapat mempensiunkan hibah lainnya
  - **Tingkat akses:** Daftar
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) **
  - **Deskripsi:** Mengontrol izin untuk mengganti kebijakan kunci untuk kunci AWS KMS yang ditentukan
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_BypassPolicyLockoutSafetyCheck](#awskeymanagementservice-kms_BypassPolicyLockoutSafetyCheck) <br /> [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) **
  - **Deskripsi:** Mengontrol izin untuk mendekripsi data sebagai bagian dari proses yang mendekripsi dan mengenkripsi ulang data dalam KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_ReEncryptOnSameKey](#awskeymanagementservice-kms_ReEncryptOnSameKey) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) **
  - **Deskripsi:** Mengontrol izin untuk mengenkripsi data sebagai bagian dari proses yang mendekripsi dan mengenkripsi ulang data dalam KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionAlgorithm](#awskeymanagementservice-kms_EncryptionAlgorithm) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_ReEncryptOnSameKey](#awskeymanagementservice-kms_ReEncryptOnSameKey) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) **
  - **Deskripsi:** Mengontrol izin untuk mereplikasi kunci utama Multi-wilayah
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:**  iam:CreateServiceLinkedRole <br /> kms:CreateKey <br /> kms:PutKeyPolicy <br /> kms:TagResource 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ReplicaRegion](#awskeymanagementservice-kms_ReplicaRegion) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) **
  - **Deskripsi:** Mengontrol izin untuk pensiun hibah. RetireGrant Operasi ini biasanya dipanggil oleh pengguna hibah setelah mereka menyelesaikan tugas-tugas yang hibah memungkinkan mereka untuk melakukan
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_](#awskeymanagementservice-kms_EncryptionContext___EncryptionContextKey_) <br /> [#awskeymanagementservice-kms_EncryptionContextKeys](#awskeymanagementservice-kms_EncryptionContextKeys) <br /> [#awskeymanagementservice-kms_GrantConstraintType](#awskeymanagementservice-kms_GrantConstraintType) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) **
  - **Deskripsi:** Mengontrol izin untuk mencabut hibah, yang menolak izin untuk semua operasi yang bergantung pada hibah
  - **Tingkat akses:** Manajemen izin
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_GrantIsForAWSResource](#awskeymanagementservice-kms_GrantIsForAWSResource) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) **
  - **Deskripsi:** Mengontrol izin untuk memanggil rotasi materi kriptografi sesuai permintaan dalam kunci KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) **
  - **Deskripsi:** Mengontrol izin untuk menjadwalkan penghapusan kunci KMS AWS 
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ScheduleKeyDeletionPendingWindowInDays](#awskeymanagementservice-kms_ScheduleKeyDeletionPendingWindowInDays) <br /> [#awskeymanagementservice-kms_TrailingDaysWithoutKeyUsage](#awskeymanagementservice-kms_TrailingDaysWithoutKeyUsage) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) **
  - **Deskripsi:** Mengontrol izin untuk menghasilkan tanda tangan digital untuk pesan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_MessageType](#awskeymanagementservice-kms_MessageType) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_SigningAlgorithm](#awskeymanagementservice-kms_SigningAlgorithm) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- ** [https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-auth.html#multi-region-auth-slr](https://docs.aws.amazon.com/kms/latest/developerguide/multi-region-keys-auth.html#multi-region-auth-slr)[hanya izin]**
  - **Deskripsi:** Mengontrol akses ke API internal yang menyinkronkan kunci Multi-region
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key) 
  - **Kunci syarat:** 
  - **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) **
  - **Deskripsi:** Mengontrol izin untuk membuat atau memperbarui tag yang dilampirkan ke kunci AWS KMS
  - **Tingkat akses:** Penandaan
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-aws_RequestTag___TagKey_](#awskeymanagementservice-aws_RequestTag___TagKey_) <br /> [#awskeymanagementservice-aws_TagKeys](#awskeymanagementservice-aws_TagKeys) <br /> [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) **
  - **Deskripsi:** Mengontrol izin untuk menghapus tag yang dilampirkan ke kunci AWS KMS
  - **Tingkat akses:** Penandaan
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-aws_TagKeys](#awskeymanagementservice-aws_TagKeys) <br /> [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) **
  - **Deskripsi:** Mengontrol izin untuk mengaitkan alias dengan kunci AWS KMS yang berbeda. Alias adalah nama ramah opsional yang dapat Anda kaitkan dengan kunci KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-alias](#awskeymanagementservice-alias)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateCustomKeyStore.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateCustomKeyStore.html) **
  - **Deskripsi:** Mengontrol izin untuk mengubah properti penyimpanan kunci kustom
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):** 
  - **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) 
  - **Tindakan bergantung:**  ec2:DescribeVpcEndpointServices 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) **
  - **Deskripsi:** Mengontrol izin untuk menghapus atau mengubah deskripsi kunci AWS KMS
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdatePrimaryRegion.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdatePrimaryRegion.html) **
  - **Deskripsi:** Mengontrol izin untuk memperbarui Wilayah utama kunci utama Multi-wilayah
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_PrimaryRegion](#awskeymanagementservice-kms_PrimaryRegion) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS yang ditentukan untuk memverifikasi tanda tangan digital
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_MessageType](#awskeymanagementservice-kms_MessageType) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_SigningAlgorithm](#awskeymanagementservice-kms_SigningAlgorithm) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 

- **  [https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) **
  - **Deskripsi:** Mengontrol izin untuk menggunakan kunci AWS KMS untuk memverifikasi kode otentikasi pesan
  - **Tingkat akses:** Tulis
  - **Jenis sumber daya (\*diperlukan):**  [#awskeymanagementservice-key](#awskeymanagementservice-key)  / **Kunci syarat:**  / **Tindakan bergantung:** 
  - **Jenis sumber daya (\*diperlukan):**  / **Kunci syarat:**  [#awskeymanagementservice-kms_CallerAccount](#awskeymanagementservice-kms_CallerAccount) <br /> [#awskeymanagementservice-kms_MacAlgorithm](#awskeymanagementservice-kms_MacAlgorithm) <br /> [#awskeymanagementservice-kms_RequestAlias](#awskeymanagementservice-kms_RequestAlias) <br /> [#awskeymanagementservice-kms_ViaService](#awskeymanagementservice-kms_ViaService)  / **Tindakan bergantung:** 



## Jenis sumber daya yang ditentukan oleh Layanan Manajemen AWS Kunci
<a name="awskeymanagementservice-resources-for-iam-policies"></a>

Jenis sumber daya berikut ditentukan oleh layanan ini dan dapat digunakan dalam elemen `Resource` pernyataan kebijakan izin IAM. Setiap tindakan dalam [Tabel tindakan](#awskeymanagementservice-actions-as-permissions) mengidentifikasi jenis sumber daya yang dapat ditentukan dengan tindakan tersebut. Jenis sumber daya juga dapat menentukan kunci kondisi mana yang dapat Anda sertakan dalam kebijakan. Tombol-tombol ini ditampilkan di kolom terakhir dari tabel Jenis sumber daya. Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tipe sumber daya](reference_policies_actions-resources-contextkeys.html#resources_table).


****  

| Jenis sumber daya | ARN | Kunci syarat | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#alias-concept](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#alias-concept)  |  arn:${Partition}:kms:${Region}:${Account}:alias/${Alias}  |  | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#kms_keys)  |  arn:${Partition}:kms:${Region}:${Account}:key/${KeyId}  |  [#awskeymanagementservice-aws_ResourceTag___TagKey_](#awskeymanagementservice-aws_ResourceTag___TagKey_) <br /> [#awskeymanagementservice-kms_KeyOrigin](#awskeymanagementservice-kms_KeyOrigin) <br /> [#awskeymanagementservice-kms_KeySpec](#awskeymanagementservice-kms_KeySpec) <br /> [#awskeymanagementservice-kms_KeyUsage](#awskeymanagementservice-kms_KeyUsage) <br /> [#awskeymanagementservice-kms_MultiRegion](#awskeymanagementservice-kms_MultiRegion) <br /> [#awskeymanagementservice-kms_MultiRegionKeyType](#awskeymanagementservice-kms_MultiRegionKeyType) <br /> [#awskeymanagementservice-kms_ResourceAliases](#awskeymanagementservice-kms_ResourceAliases)  | 

## Kunci kondisi untuk Layanan Manajemen AWS Kunci
<a name="awskeymanagementservice-policy-keys"></a>

AWS Key Management Service mendefinisikan kunci kondisi berikut yang dapat digunakan dalam `Condition` elemen kebijakan IAM. Anda dapat menggunakan kunci ini untuk menyempurnakan syarat lebih lanjut saat pernyataan kebijakan berlaku. Untuk detail tentang kolom dalam tabel berikut, lihat [Tabel tombol kondisi](reference_policies_actions-resources-contextkeys.html#context_keys_table).

Untuk melihat kunci kondisi global yang tersedia untuk semua layanan, lihat [kunci konteks kondisi AWS global](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html).


****  

| Kunci syarat | Deskripsi | Tipe | 
| --- | --- | --- | 
|   [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-requesttag)  | Memfilter akses ke operasi AWS KMS yang ditentukan berdasarkan kunci dan nilai tag dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/tag-authorization.html](https://docs.aws.amazon.com/kms/latest/developerguide/tag-authorization.html)  | Memfilter akses ke operasi AWS KMS yang ditentukan berdasarkan tag yang ditetapkan ke kunci AWS KMS | String | 
|   [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-tagkeys)  | Memfilter akses ke operasi AWS KMS yang ditentukan berdasarkan kunci tag dalam permintaan | ArrayOfString | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-bypass-policy-lockout-safety-check](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-bypass-policy-lockout-safety-check)  | Memfilter akses ke CreateKey dan PutKeyPolicy operasi berdasarkan nilai BypassPolicyLockoutSafetyCheck parameter dalam permintaan | Bool | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-caller-account](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-caller-account)  | Memfilter akses ke operasi AWS KMS tertentu berdasarkan Akun AWS ID pemanggil. Anda dapat menggunakan kunci kondisi ini untuk mengizinkan atau menolak akses ke semua pengguna dan peran IAM Akun AWS dalam satu pernyataan kebijakan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-spec-replaced](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-spec-replaced)  | Kunci CustomerMasterKeySpec kondisi kms: tidak digunakan lagi. Sebagai gantinya, gunakan kunci KeySpec kondisi kms: | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-usage-replaced](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-usage-replaced)  | Kunci CustomerMasterKeyUsage kondisi kms: tidak digunakan lagi. Sebagai gantinya, gunakan kunci KeyUsage kondisi kms: | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-data-key-pair-spec](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-data-key-pair-spec)  | Memfilter akses GenerateDataKeyPair dan GenerateDataKeyPairWithoutPlaintext operasi berdasarkan nilai KeyPairSpec parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-algorithm](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-algorithm)  | Memfilter akses ke operasi enkripsi berdasarkan nilai algoritma enkripsi dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-context](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-context)  | Memfilter akses ke kunci AWS KMS simetris berdasarkan konteks enkripsi dalam operasi kriptografi. Kondisi ini mengevaluasi kunci dan nilai di setiap pasangan konteks enkripsi kunci-nilai | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-context-keys](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-encryption-context-keys)  | Memfilter akses ke kunci AWS KMS simetris berdasarkan konteks enkripsi dalam operasi kriptografi. Kunci kondisi ini hanya mengevaluasi kunci di setiap pasangan konteks enkripsi nilai-kunci | ArrayOfString | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-expiration-model](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-expiration-model)  | Memfilter akses ke ImportKeyMaterial operasi berdasarkan nilai ExpirationModel parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-constraint-type](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-constraint-type)  | Memfilter akses ke CreateGrant operasi berdasarkan batasan hibah dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-is-for-aws-resource](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-is-for-aws-resource)  | Memfilter akses ke CreateGrant operasi ketika permintaan berasal dari AWS layanan tertentu | Bool | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-operations](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grant-operations)  | Memfilter akses ke CreateGrant operasi berdasarkan operasi dalam hibah | ArrayOfString | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grantee-principal](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-grantee-principal)  | Memfilter akses ke CreateGrant operasi berdasarkan pokok penerima hibah dalam hibah | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-agreement-algorithm](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-agreement-algorithm)  | Memfilter akses ke DeriveSharedSecret operasi berdasarkan nilai KeyAgreementAlgorithm parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-origin](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-origin)  | Memfilter akses ke operasi API berdasarkan properti Origin dari kunci AWS KMS yang dibuat oleh atau digunakan dalam operasi. Gunakan untuk memenuhi syarat otorisasi CreateKey operasi atau operasi apa pun yang diizinkan untuk kunci KMS | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-spec](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-spec)  | Memfilter akses ke operasi API berdasarkan KeySpec properti kunci AWS KMS yang dibuat oleh atau digunakan dalam operasi. Gunakan untuk memenuhi syarat otorisasi CreateKey operasi atau operasi apa pun yang diizinkan untuk sumber daya kunci KMS | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-usage](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-key-usage)  | Memfilter akses ke operasi API berdasarkan KeyUsage properti kunci AWS KMS yang dibuat oleh atau digunakan dalam operasi. Gunakan untuk memenuhi syarat otorisasi CreateKey operasi atau operasi apa pun yang diizinkan untuk sumber daya kunci KMS | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-mac-algorithm](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-mac-algorithm)  | Memfilter akses ke GenerateMac dan VerifyMac operasi berdasarkan MacAlgorithm parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-message-type](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-message-type)  | Memfilter akses ke operasi Tanda dan Verifikasi berdasarkan nilai MessageType parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-multi-region](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-multi-region)  | Memfilter akses ke operasi API berdasarkan MultiRegion properti kunci AWS KMS yang dibuat oleh atau digunakan dalam operasi. Gunakan untuk memenuhi syarat otorisasi CreateKey operasi atau operasi apa pun yang diizinkan untuk sumber daya kunci KMS | Bool | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-multi-region-key-type](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-multi-region-key-type)  | Memfilter akses ke operasi API berdasarkan MultiRegionKeyType properti kunci AWS KMS yang dibuat oleh atau digunakan dalam operasi. Gunakan untuk memenuhi syarat otorisasi CreateKey operasi atau operasi apa pun yang diizinkan untuk sumber daya kunci KMS | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-primary-region](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-primary-region)  | Memfilter akses ke UpdatePrimaryRegion operasi berdasarkan nilai PrimaryRegion parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-reencrypt-on-same-key](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-reencrypt-on-same-key)  | Memfilter akses ke ReEncrypt operasi ketika menggunakan kunci AWS KMS yang sama yang digunakan untuk operasi Enkripsi | Bool | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-image-sha](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-image-sha)  | Memfilter akses ke operasi API berdasarkan hash gambar dalam dokumen pengesahan dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 0 dalam dokumen pengesahan dalam permintaan. PCR0 adalah ukuran yang berdekatan dari kode executable firmware sistem inti | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 1 dalam dokumen pengesahan dalam permintaan. PCR1 adalah ukuran yang berdekatan dari konfigurasi data/host platform firmware sistem inti, biasanya termasuk nomor seri dan model | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 10 dalam dokumen pengesahan dalam permintaan. PCR10 adalah ukuran perlindungan log pengukuran IMA yang berdekatan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 11 dalam dokumen pengesahan dalam permintaan. PCR11 adalah ukuran yang berdekatan dari semua komponen gambar kernel terpadu (UKI) | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 12 dalam dokumen pengesahan dalam permintaan. PCR12 adalah ukuran yang berdekatan dari baris perintah kernel, kredensyal sistem, dan gambar konfigurasi sistem | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 13 dalam dokumen pengesahan dalam permintaan. PCR13 adalah ukuran yang berdekatan dari semua gambar ekstensi sistem untuk initrd | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 14 dalam dokumen pengesahan dalam permintaan. PCR14 adalah ukuran yang berdekatan dari sertifikat dan hash “MOK” | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 15 dalam dokumen pengesahan dalam permintaan. PCR15 adalah ukuran yang berdekatan dari kunci enkripsi volume sistem file root | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 16 dalam dokumen pengesahan dalam permintaan. PCR16 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 17 dalam dokumen pengesahan dalam permintaan. PCR17 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 18 dalam dokumen pengesahan dalam permintaan. PCR18 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 19 dalam dokumen pengesahan dalam permintaan. PCR19 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 2 dalam dokumen pengesahan dalam permintaan. PCR2 adalah ukuran bersebelahan dari kode eksekusi yang diperluas atau dapat dicolokkan, termasuk ROM opsi pada perangkat keras yang dapat dicolokkan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 20 dalam dokumen pengesahan dalam permintaan. PCR20 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 21 dalam dokumen pengesahan dalam permintaan. PCR21 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 22 dalam dokumen pengesahan dalam permintaan. PCR22 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 23 dalam dokumen pengesahan dalam permintaan. PCR23 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 3 dalam dokumen pengesahan dalam permintaan. PCR3 adalah ukuran yang berdekatan dari data firmware yang diperluas atau dapat dicolokkan, termasuk informasi tentang perangkat keras yang dapat dicolokkan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 4 dalam dokumen pengesahan dalam permintaan. PCR4 adalah ukuran boot loader dan driver tambahan yang berdekatan, termasuk binari dan ekstensi yang dimuat oleh boot loader | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 5 dalam dokumen pengesahan dalam permintaan. PCR5 adalah ukuran tabel yang berdekatan GPT/Partition  | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 6 dalam dokumen pengesahan dalam permintaan. PCR6 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 7 dalam dokumen pengesahan dalam permintaan. PCR7 adalah ukuran negara yang berdekatan SecureBoot  | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 8 dalam dokumen pengesahan dalam permintaan. PCR8 adalah ukuran yang berdekatan dari perintah dan baris perintah kernel | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-tpm.html#conditions-kms-recipient-nitro-tpm-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 9 dalam dokumen pengesahan dalam permintaan. PCR9 adalah ukuran yang berdekatan dari semua file yang dibaca (termasuk gambar kernel) | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 0 dalam dokumen pengesahan dalam permintaan. PCR0 adalah ukuran bersebelahan dari isi file gambar enclave, tanpa data bagian | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 1 dalam dokumen pengesahan dalam permintaan. PCR1 adalah pengukuran yang berdekatan dari kernel Linux dan data bootstrap | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 10 dalam dokumen pengesahan dalam permintaan. PCR10 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 11 dalam dokumen pengesahan dalam permintaan. PCR11 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 12 dalam dokumen pengesahan dalam permintaan. PCR12 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 13 dalam dokumen pengesahan dalam permintaan. PCR13 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 14 dalam dokumen pengesahan dalam permintaan. PCR14 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 15 dalam dokumen pengesahan dalam permintaan. PCR15 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 16 dalam dokumen pengesahan dalam permintaan. PCR16 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 17 dalam dokumen pengesahan dalam permintaan. PCR17 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 18 dalam dokumen pengesahan dalam permintaan. PCR18 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 19 dalam dokumen pengesahan dalam permintaan. PCR19 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 2 dalam dokumen pengesahan dalam permintaan. PCR2 adalah pengukuran berurutan yang berdekatan dari aplikasi pengguna, tanpa ramf boot | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 20 dalam dokumen pengesahan dalam permintaan. PCR20 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 21 dalam dokumen pengesahan dalam permintaan. PCR21 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 22 dalam dokumen pengesahan dalam permintaan. PCR22 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 23 dalam dokumen pengesahan dalam permintaan. PCR23 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 24 dalam dokumen pengesahan dalam permintaan. PCR24 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 25 dalam dokumen pengesahan dalam permintaan. PCR25 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 26 dalam dokumen pengesahan dalam permintaan. PCR26 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 27 dalam dokumen pengesahan dalam permintaan. PCR27 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 28 dalam dokumen pengesahan dalam permintaan. PCR28 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 29 dalam dokumen pengesahan dalam permintaan. PCR29 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 3 dalam dokumen pengesahan dalam permintaan. PCR3 adalah pengukuran bersebelahan dari peran IAM yang ditetapkan ke instance induk | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 30 dalam dokumen pengesahan dalam permintaan. PCR30 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 31 dalam dokumen pengesahan dalam permintaan. PCR31 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 4 dalam dokumen pengesahan dalam permintaan. PCR4 adalah pengukuran bersebelahan dari ID dari instance induk | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 5 dalam dokumen pengesahan dalam permintaan. PCR5 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 6 dalam dokumen pengesahan dalam permintaan. PCR6 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 7 dalam dokumen pengesahan dalam permintaan. PCR7 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 8 dalam dokumen pengesahan dalam permintaan. PCR8 adalah ukuran sertifikat penandatanganan yang ditentukan untuk file gambar enclave | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-nitro-enclaves.html#conditions-kms-recipient-pcrs)  | Memfilter akses oleh platform configuration register (PCR) 9 dalam dokumen pengesahan dalam permintaan. PCR9 adalah PCR khusus yang dapat ditentukan oleh pengguna untuk kasus penggunaan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-replica-region](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-replica-region)  | Memfilter akses ke ReplicateKey operasi berdasarkan nilai ReplicaRegion parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-request-alias](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-request-alias)  | Memfilter akses ke operasi kriptografi DescribeKey,, dan GetPublicKey berdasarkan alias dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-resource-aliases](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-resource-aliases)  | Memfilter akses ke operasi AWS KMS tertentu berdasarkan alias yang terkait dengan kunci KMS AWS  | ArrayOfString | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-retiring-principal](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-retiring-principal)  | Memfilter akses ke CreateGrant operasi berdasarkan kepala sekolah pensiun dalam hibah | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-rotation-period-in-days](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-rotation-period-in-days)  | Memfilter akses ke EnableKeyRotation operasi berdasarkan nilai RotationPeriodInDays parameter dalam permintaan | Numerik | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-schedule-key-deletion-pending-window-in-days](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-schedule-key-deletion-pending-window-in-days)  | Memfilter akses ke ScheduleKeyDeletion operasi berdasarkan nilai PendingWindowInDays parameter dalam permintaan | Numerik | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-signing-algorithm](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-signing-algorithm)  | Memfilter akses ke operasi Tanda dan Verifikasi berdasarkan algoritma penandatanganan dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-trailing-days-without-key-usage](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-trailing-days-without-key-usage)  | Memfilter akses ke ScheduleKeyDeletion dan DisableKey operasi berdasarkan jumlah hari sejak kunci AWS KMS terakhir digunakan | Numerik | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-valid-to](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-valid-to)  | Memfilter akses ke ImportKeyMaterial operasi berdasarkan nilai ValidTo parameter dalam permintaan. Anda dapat menggunakan kunci kondisi ini untuk memungkinkan pengguna mengimpor materi kunci hanya ketika kedaluwarsa pada tanggal yang ditentukan | Date | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-via-service](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-via-service)  | Memfilter akses ketika permintaan yang dibuat atas nama kepala sekolah berasal dari AWS layanan tertentu | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-wrapping-algorithm](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-wrapping-algorithm)  | Memfilter akses ke GetParametersForImport operasi berdasarkan nilai WrappingAlgorithm parameter dalam permintaan | String | 
|   [https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-wrapping-key-spec](https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html#conditions-kms-wrapping-key-spec)  | Memfilter akses ke GetParametersForImport operasi berdasarkan nilai WrappingKeySpec parameter dalam permintaan | String |