Skip to content

/AWS1/CL_EKSPROVIDER

Identifies the Key Management Service (KMS) key used to encrypt the secrets.

CONSTRUCTOR

IMPORTING

Optional arguments:

IV_KEYARN TYPE /AWS1/EKSSTRING /AWS1/EKSSTRING

Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric and created in the same Amazon Web Services Region as the cluster. If the KMS key was created in a different account, the IAM principal must have access to the KMS key. For more information, see Allowing users in other accounts to use a KMS key in the Key Management Service Developer Guide.


Queryable Attributes

keyArn

Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric and created in the same Amazon Web Services Region as the cluster. If the KMS key was created in a different account, the IAM principal must have access to the KMS key. For more information, see Allowing users in other accounts to use a KMS key in the Key Management Service Developer Guide.

Accessible with the following methods

Method Description
GET_KEYARN() Getter for KEYARN, with configurable default
ASK_KEYARN() Getter for KEYARN w/ exceptions if field has no value
HAS_KEYARN() Determine if KEYARN has a value