kms/aws.sdk.kotlin.services.kms.model/GenerateDataKeyResponse/Builder

Builder

Properties

The encrypted copy of the data key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded.

ciphertextForRecipient

var ciphertextForRecipient: ByteArray?

The plaintext data key encrypted with the public key from the attestation document. This ciphertext can be decrypted only by using a private key from the attested environment.

keyId

var keyId: String?

The Amazon Resource Name (key ARN) of the KMS key that encrypted the data key.

keyMaterialId

var keyMaterialId: String?

The identifier of the key material used to encrypt the data key. This field is omitted if the request includes the Recipient parameter.

plaintext

var plaintext: ByteArray?

The plaintext data key. When you use the HTTP API or the Amazon Web Services CLI, the value is Base64-encoded. Otherwise, it is not Base64-encoded. Use this data key to encrypt your data outside of KMS. Then, remove it from memory as soon as possible.