EnableKeyRotation - AWS Key Management Service

本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。

EnableKeyRotation

下列範例顯示呼叫 EnableKeyRotation 操作的 AWS CloudTrail 日誌項目。如需輪換金鑰時所寫入的 CloudTrail 日誌項目範例,請參閱 RotateKey。如需關於輪換 AWS KMS keys的資訊,請參閱 旋轉 AWS KMS keys

注意

rotation-period 是選用的請求參數。如果您在啟用自動金鑰輪換時未指定輪換期間,預設值為 365 天。

在 2022 年 12 月或之後記錄的此操作的 CloudTrail 日誌項目會在 responseElements.keyId 值中包含受影響 KMS 金鑰的金鑰 ARN,即使此操作不會傳回金鑰 ARN。

{ "eventVersion": "1.05", "userIdentity": { "type": "IAMUser", "principalId": "EX_PRINCIPAL_ID", "arn": "arn:aws:iam::111122223333:user/Alice", "accountId": "111122223333", "accessKeyId": "EXAMPLE_KEY_ID", "userName": "Alice" }, "eventTime": "2020-07-25T23:41:56Z", "eventSource": "kms.amazonaws.com", "eventName": "EnableKeyRotation", "awsRegion": "us-west-2", "sourceIPAddress": "192.0.2.0", "userAgent": "AWS Internal", "requestParameters": { "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab", "rotationPeriodInDays": 180 }, "responseElements": { "keyId":"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" }, "requestID": "81f5b794-452b-4d6a-932b-68c188165273", "eventID": "fefc43a7-8e06-419f-bcab-b3bf18d6a401", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::KMS::Key", "ARN": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" } ], "eventType": "AwsApiCall", "recipientAccountId": "111122223333" }