本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
這些範例顯示輪換 之操作的 AWS CloudTrail 日誌項目 AWS KMS keys。如需輪換 KMS 金鑰的詳細資訊,請參閱 旋轉 AWS KMS keys。
下列範例顯示 操作的 CloudTrail 日誌項目,該操作會輪換啟用自動金鑰輪換的對稱加密 KMS 金鑰。如需啟用自動輪換的資訊,請參閱 旋轉 AWS KMS keys。
如需記錄 EnableKeyRotation
操作的 CloudTrail 日誌項目範例,請參閱 EnableKeyRotation。
{
"eventVersion": "1.08",
"userIdentity": {
"accountId": "111122223333",
"invokedBy": "AWS Internal"
},
"eventTime": "2021-01-14T01:41:59Z",
"eventSource": "kms.amazonaws.com",
"eventName": "RotateKey",
"awsRegion": "us-west-2",
"sourceIPAddress": "AWS Internal",
"userAgent": "AWS Internal",
"requestParameters": null,
"responseElements": null,
"eventID": "a24b3967-ddad-417f-9b22-2332b918db06",
"readOnly": false,
"resources": [
{
"accountId": "111122223333",
"type": "AWS::KMS::Key",
"ARN": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
}
],
"eventType": "AwsServiceEvent",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"rotationType": "AUTOMATIC",
"keyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
},
"eventCategory": "Management"
}
下列範例顯示 RotateKeyOnDemand 操作的 CloudTrail 日誌項目。如需隨需輪換對稱加密 KMS 金鑰的詳細資訊,請參閱 執行隨需金鑰輪換。
如需記錄 RotateKeyOnDemand
操作的 CloudTrail 日誌項目範例,請參閱 RotateKeyOnDemand。
{
"eventVersion": "1.08",
"userIdentity": {
"accountId": "111122223333",
"invokedBy": "AWS Internal"
},
"eventTime": "2021-01-14T01:41:59Z",
"eventSource": "kms.amazonaws.com",
"eventName": "RotateKey",
"awsRegion": "us-west-2",
"sourceIPAddress": "AWS Internal",
"userAgent": "AWS Internal",
"requestParameters": null,
"responseElements": null,
"eventID": "a24b3967-ddad-417f-9b22-2332b918db06",
"readOnly": false,
"resources": [
{
"accountId": "111122223333",
"type": "AWS::KMS::Key",
"ARN": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
}
],
"eventType": "AwsServiceEvent",
"recipientAccountId": "111122223333",
"serviceEventDetails": {
"rotationType": "ON_DEMAND",
"keyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
},
"eventCategory": "Management"
}