Wondering what’s next for npm?Check out our public roadmap! »

    lulo-plugin-kms-grant

    1.2.0 • Public • Published

    lulo KMS Grants

    lulo KMS Grants manages AWS KMS Key grants.

    lulo KMS Grants is a lulo plugin

    Installation

    $ npm install lulo-plugin-kms-grant --save
    

    Usage

    Properties

    • GranteePrincipal: Required. The principal this grant is given to.
    • KeyId: Required. The KMS Key the grant is valid for.
    • Operations: Required. An array of operations the grant enables. Must contain at least one operation.
    • Name: Update requires replacement. A friendly name for identifying the grant. Use this value to prevent unintended creation of duplicate grants when retrying this request.
    • Constraints
    • GrantTokens

    See the AWS SDK Documentation for KMS::CreateGrant for further details.

    Note: If you update a grant that does not have a Name specified, the old Grant will be revoked and a new Grant, with a new GrantId will be created. By specifying a Name, and not changing it when you update the Grant, you will keep the same GrantId even if you update it.

    Return Values

    Ref

    When the logical ID of this resource is provided to the Ref intrinsic function, Ref returns the GrantId.

    { "Ref": "KmsGrant" }

    Fn::GetAtt

    GrantToken Returns the GrantToken generated for this Grant.

    Required IAM Permissions

    The Custom Resource Lambda requires the following permissions for this plugin to work:

    {
       "Effect": "Allow",
       "Action": [
           "kms:CreateGrant",
           "kms:RevokeGrant"
       ],
       "Resource": "*"
    }
    

    License

    The MIT License (MIT)

    Change Log

    Change Log

    Install

    npm i lulo-plugin-kms-grant

    DownloadsWeekly Downloads

    2

    Version

    1.2.0

    License

    MIT

    Unpacked Size

    15.9 kB

    Total Files

    8

    Last publish

    Collaborators

    • avatar