KMS Alias

KMS Alias in AWS is a friendly name that you can assign to a customer master key (CMK) in AWS Key Management Service. Instead of using the key’s unique identifier or ARN, you can reference the alias to simplify key management and usage in applications. Aliases make it easier to rotate keys or change the underlying CMK without updating all dependent resources or code.

aws.kms_alias

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
alias_arncorestringString that contains the key ARN.
alias_namecorestringString that contains the alias. This value begins with alias/.
creation_datecoretimestampDate and time that the alias was most recently created in the account and Region. Formatted as Unix time.
last_updated_datecoretimestampDate and time that the alias was most recently associated with a KMS key in the account and Region. Formatted as Unix time.
policiescorejson
policycorestringA key policy document in JSON format.
policy_namecorestringThe name of the key policy. The only valid value is default.
tagscorehstore
target_key_idcorestringString that contains the key identifier of the KMS key associated with the alias.