本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
如果您将密钥材料导入 KMS 密钥,则可以使用DeleteImportedKeyMaterial操作随时删除导入的密钥材料。当您从 KMS 密钥中删除导入的密钥材料时,KMS 密钥的密钥状态会更改为 PendingImport
,在任何加密操作中都无法使用 KMS 密钥。有关详细信息,请参阅删除导入的密钥材料。
以下示例显示了为该DeleteImportedKeyMaterial
操作生成的 AWS CloudTrail 日志条目。
{
"eventVersion": "1.08",
"userIdentity": {
"type": "IAMUser",
"principalId": "EX_PRINCIPAL_ID",
"arn": "arn:aws:iam::111122223333:user/Alice",
"accountId": "111122223333",
"accessKeyId": "EXAMPLE_KEY_ID",
"userName": "Alice"
},
"eventTime": "2022-10-04T21:43:33Z",
"eventSource": "kms.amazonaws.com",
"eventName": "DeleteImportedKeyMaterial",
"awsRegion": "us-west-2",
"sourceIPAddress": "192.0.2.0",
"userAgent": "AWS Internal",
"requestParameters": {
"keyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
},
"responseElements": {
"keyId":"&example-key-arn-1;"
},
"requestID": "dcf0e82f-dad0-4622-a378-a5b964ad42c1",
"eventID": "2afbb991-c668-4641-8a00-67d62e1fecbd",
"readOnly": false,
"resources": [
{
"accountId": "111122223333",
"type": "AWS::KMS::Key",
"ARN": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
}
],
"eventType": "AwsApiCall",
"managementEvent": true,
"recipientAccountId": "111122223333",
"eventCategory": "Management"
}