View a markdown version of this page

Known issues for the CloudHSM CLI for AWS CloudHSM - AWS CloudHSM
The key-reference filter fails to select session keys

Known issues for the CloudHSM CLI for AWS CloudHSM

The following issues impact the CloudHSM CLI for AWS CloudHSM.

The key-reference filter fails to select session keys

Commands that use key-reference to filter session (ephemeral) keys fail with the error UX000: Ephemeral key is not expected because we cannot build it without HSM Connection.

The key set-attribute command is not affected and can select session keys by key-reference.

  • Workaround: Use attribute-based filters (such as attr.label) to select session keys. If multiple session keys share identical attributes, use key set-attribute with the key-reference filter to assign unique labels first, then filter by label.

  • Resolution status: This issue has been resolved in Client SDK 5.18.0. The key-reference filter now selects session (ephemeral) keys in the CloudHSM CLI and JCE. Upgrade to version 5.18.0 or later to benefit from the fix.