# GrantListEntry
<a name="API_GrantListEntry"></a>

Contains information about a grant.

## Contents
<a name="API_GrantListEntry_Contents"></a>

**Note**  
In the following list, the required parameters are described first.

 ** Constraints **   <a name="KMS-Type-GrantListEntry-Constraints"></a>
A list of key-value pairs that must be present in the encryption context of certain subsequent operations that the grant allows.  
Type: [GrantConstraints](API_GrantConstraints.md) object  
Required: No

 ** CreationDate **   <a name="KMS-Type-GrantListEntry-CreationDate"></a>
The date and time when the grant was created.  
Type: Timestamp  
Required: No

 ** GranteePrincipal **   <a name="KMS-Type-GrantListEntry-GranteePrincipal"></a>
The identity that gets the permissions in the grant.  
The `GranteePrincipal` field in the `ListGrants` response usually contains the user or role designated as the grantee principal in the grant. However, when the grantee principal in the grant is an AWS service, the `GranteePrincipal` field contains the [service principal](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html#principal-services), which might represent several different grantee principals.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `^[\w+=,.@:/-]+$`   
Required: No

 ** GrantId **   <a name="KMS-Type-GrantListEntry-GrantId"></a>
The unique identifier for the grant.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Required: No

 ** IssuingAccount **   <a name="KMS-Type-GrantListEntry-IssuingAccount"></a>
The AWS account under which the grant was issued.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `^[\w+=,.@:/-]+$`   
Required: No

 ** KeyId **   <a name="KMS-Type-GrantListEntry-KeyId"></a>
The unique identifier for the KMS key to which the grant applies.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 2048.  
Required: No

 ** Name **   <a name="KMS-Type-GrantListEntry-Name"></a>
The friendly name that identifies the grant. If a name was provided in the [CreateGrant](API_CreateGrant.md) request, that name is returned. Otherwise this value is null.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `^[a-zA-Z0-9:/_-]+$`   
Required: No

 ** Operations **   <a name="KMS-Type-GrantListEntry-Operations"></a>
The list of operations permitted by the grant.  
Type: Array of strings  
Valid Values: `Decrypt | Encrypt | GenerateDataKey | GenerateDataKeyWithoutPlaintext | ReEncryptFrom | ReEncryptTo | Sign | Verify | GetPublicKey | CreateGrant | RetireGrant | DescribeKey | GenerateDataKeyPair | GenerateDataKeyPairWithoutPlaintext | GenerateMac | VerifyMac | DeriveSharedSecret`   
Required: No

 ** RetiringPrincipal **   <a name="KMS-Type-GrantListEntry-RetiringPrincipal"></a>
The principal that can retire the grant.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `^[\w+=,.@:/-]+$`   
Required: No

## See Also
<a name="API_GrantListEntry_SeeAlso"></a>

For more information about using this API in one of the language-specific AWS SDKs, see the following:
+  [AWS SDK for C\$1\$1](https://docs.aws.amazon.com/goto/SdkForCpp/kms-2014-11-01/GrantListEntry) 
+  [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/kms-2014-11-01/GrantListEntry) 
+  [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/kms-2014-11-01/GrantListEntry)