# Key states of AWS KMS keys
An AWS KMS key always has a key state. Operations on the KMS key and its environment can change the key state. The key state can change either transiently, or until another operation changes its key state. These operations are done either asynchronously, or by an API call.
The table in this section shows how key states affect calls to AWS KMS API operations. As a result of its key state, an operation on a KMS key is expected to succeed (`✓`), fail (`X`), or succeed only under certain conditions (`?`). The result often differs for KMS keys with imported key material.
This table includes only the API operations that use an existing KMS key. Other operations, such as [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) and [ListKeys](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeys.html), are omitted.
**Topics**
+ [
## Key states and KMS key types
](#key-state-cmk-type)
+ [
## Key state table
](#key-state-table)
## Key states and KMS key types
The type of the KMS key determines the key states it can have.
+ All KMS keys can be in the `Enabled`, `Disabled`, and `PendingDeletion` states.
+ Most KMS keys are created in the `Enabled` state. Keys with imported key material are created in the `PendingImport` state.
+ The `PendingImport` state applies only to KMS keys with [imported key material](importing-keys.md). When any key material for an imported key is deleted or it expires, then the state changes from `Enabled` to `PendingImport`.
+ The `Unavailable` state applies only to a KMS key in a [custom key store](key-store-overview.md#custom-key-store-overview). A KMS key in an [AWS CloudHSM key store](keystore-cloudhsm.md) is `Unavailable` when the custom key store is intentionally disconnected from its AWS CloudHSM cluster. A KMS key in an [external key store](keystore-external.md) is `Unavailable` when the custom key store is intentionally disconnected from its [external key store proxy](keystore-external.md#concept-xks-proxy). You can view and manage unavailable KMS keys, but you cannot use them in cryptographic operations.
The key state of a KMS key in a custom key store is not affected by changes to its backing key. A KMS key in a AWS CloudHSM key store is not affected by changes to its [associated key material](keystore-cloudhsm.md#concept-cmk-key-store) in the AWS CloudHSM cluster. A KMS key in an external key store is not affected by changes to its [external key](keystore-external.md#concept-external-key) in an external key manager. If the backing key is disabled or deleted, the KMS key state doesn't change, but cryptographic operations using the KMS key fail.
+ The `Creating`, `Updating`, and `PendingReplicaDeletion` key states apply only to [multi-Region keys](multi-region-keys-overview.md).
+ A multi-Region replica key is in the transient `Creating` key state while it is being created. This process might still be in progress when the [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) operation completes. When the replicate process completes, the replica key is in the `Enabled` or `PendingImport` state.
+ Multi-Region keys are in the transient `Updating` key state while the primary Region is being updated. This process might still be in progress when the [UpdatePrimaryRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdatePrimaryRegion.html) operation completes. When the update process completes, the primary and replica keys resume the `Enabled` key state.
+ When you schedule deletion of a multi-Region primary key that has replica keys, the primary key is in the `PendingReplicaDeletion` state until all of its replica keys are deleted. Then its key state changes to `PendingDeletion`. For details, see [Deleting multi-Region keys](deleting-keys.md#deleting-mrks).
## Key state table
The following table shows how the key state of a KMS key affects AWS KMS operations.
The descriptions of the numbered footnotes ([*n*]) are at the end of this topic.
**Note**
You might need to scroll horizontally or vertically to see all of the data in this table.
****
| API | Enabled | Disabled | **Pending deletion** **Pending replica deletion** | Pending import | Unavailable | Creating | Updating |
| --- | --- | --- | --- | --- | --- | --- | --- |
| CancelKeyDeletion | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[4] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[4] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[4] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [4], [13] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [4] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [4] |
| CreateAlias | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| CreateGrant | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| Decrypt | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [11] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| DeleteAlias | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| DeleteImportedKeyMaterial | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) [9] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) [9] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) [9] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| DeriveSharedSecret | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| DescribeKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| DisableKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) [12] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| DisableKeyRotation | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [3] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[6] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] |
| EnableKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) [12] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| EnableKeyRotation | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [3] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[6] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] |
| Encrypt | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [11] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GenerateDataKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [11] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GenerateDataKeyPair | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GenerateDataKeyPairWithoutPlaintext | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GenerateDataKeyWithoutPlaintext | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [11] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GenerateMac | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GetKeyPolicy | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| GetKeyRotationStatus | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[6] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] |
| GetParametersForImport | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [9] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [9] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [8] or [9] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [9] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| GetPublicKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ImportKeyMaterial | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [9] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [9] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [9] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [9] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ListAliases | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ListGrants | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ListKeyPolicies | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ListKeyRotations | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] |
| ListResourceTags | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| PutKeyPolicy | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ReEncrypt | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [11] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| ReplicateKey | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| RetireGrant | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| RevokeGrant | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| RotateKeyOnDemand | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [3] or [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [7] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png) [7] |
| ScheduleKeyDeletion | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [15] |
| Sign | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| TagResource | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| UntagResource | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| UpdateAlias | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Question mark icon in a purple circle, representing help or information.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-question-mark.png)[10] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| UpdateKeyDescription | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[3] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| UpdatePrimaryRegion | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| Verify | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
| VerifyMac | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[1] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [2] or [3] | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png)[5] | N/A | ![\[No entry symbol with a person icon, indicating restricted access or prohibition.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-disabled-pending-deletion.png) [14] | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/kms/latest/developerguide/images/icon-successful.png) |
**Table Details**
+ [1] `DisabledException: is disabled.`
+ [2] `DisabledException: is pending deletion (or pending replica deletion).`
+ [3] `KMSInvalidStateException: is pending deletion (or pending replica deletion).`
+ [4] `KMSInvalidStateException: is not pending deletion (or pending replica deletion).`
+ [5] `KMSInvalidStateException: is pending import because no key material has ever been imported or one of the imported key materials is deleted or expired.`
+ [6] `UnsupportedOperationException: origin is EXTERNAL which is not valid for this operation.`
+ [7] If the KMS key is in a custom key store: `UnsupportedOperationException`.
+ [8] If the KMS key has imported key material: `KMSInvalidStateException`
+ [9] If the KMS key cannot have imported key material: `UnsupportedOperationException`.
+ [10] If the source KMS key is pending deletion, the command succeeds. If the destination KMS key is pending deletion, the command fails with error: `KMSInvalidStateException : is pending deletion.`
+ [11] `KMSInvalidStateException: is unavailable.` You cannot perform this operation on an unavailable KMS key.
+ [12] The operation succeeds, but the key state of the KMS key does not change until it becomes available.
+ [13] While a KMS key in a custom key store is pending deletion, its key state remains `PendingDeletion` even if the KMS key becomes unavailable. This allows you to cancel deletion of the KMS key at any time during the waiting period.
+ [14] `KMSInvalidStateException: is creating.` AWS KMS throws this exception while it is replicating a multi-Region key (`ReplicateKey`).
+ [15] `KMSInvalidStateException: is updating.` AWS KMS throws this exception while it is updating the primary Region of a multi-Region key (`UpdatePrimaryRegion`).