ImportKeyMaterialResponse

The following example imports key material into the specified KMS key.

To import key material into a KMS key

var client = new AmazonKeyManagementServiceClient();
var response = client.ImportKeyMaterial(new ImportKeyMaterialRequest 
{
    EncryptedKeyMaterial = new MemoryStream(<binary data>), // The encrypted key material to import.
    ExpirationModel = "KEY_MATERIAL_DOES_NOT_EXPIRE", // A value that specifies whether the key material expires.
    ImportToken = new MemoryStream(<binary data>), // The import token that you received in the response to a previous GetParametersForImport request.
    KeyId = "1234abcd-12ab-34cd-56ef-1234567890ab" // The identifier of the KMS key to import the key material into. You can use the key ID or the Amazon Resource Name (ARN) of the KMS key.
});

string keyId = response.KeyId; // The Amazon Resource Name (ARN) of the KMS key into which key material was imported.
string keyMaterialId = response.KeyMaterialId; // Identifies the imported key material.

            

The following example imports key material that expires in 3 days. It might be part of an application that frequently reimports the same key material to comply with business rules or regulations.

To import key material into a KMS key

var client = new AmazonKeyManagementServiceClient();
var response = client.ImportKeyMaterial(new ImportKeyMaterialRequest 
{
    EncryptedKeyMaterial = new MemoryStream(<binary data>), // The encrypted key material to import.
    ExpirationModel = "KEY_MATERIAL_EXPIRES", // A value that specifies whether the key material expires.
    ImportToken = new MemoryStream(<binary data>), // The import token that you received in the response to a previous GetParametersForImport request.
    KeyId = "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab", // The identifier of the KMS key to import the key material into. You can use the key ID or the Amazon Resource Name (ARN) of the KMS key.
    ValidTo = new DateTime(2023, 9, 30, 12, 0, 0, DateTimeKind.Utc) // Specifies the date and time when the imported key material expires.
});

string keyId = response.KeyId; // The Amazon Resource Name (ARN) of the KMS key into which key material was imported.
string keyMaterialId = response.KeyMaterialId; // Identifies the imported key material.