public_keys

Creates, updates, deletes, gets or lists a public_keys resource.

Overview

Name	public_keys
Type	Resource
Id	aws.cloudtrail.public_keys

Fields

The following fields are returned by SELECT queries:

list_public_keys

Name	Datatype	Description
fingerprint	string	The fingerprint of the public key.
validity_end_time	string (date-time)	The ending time of validity of the public key.
validity_start_time	string (date-time)	The starting time of validity of the public key.
value	string (byte)	The DER encoded public key value in PKCS#1 format.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_public_keys	select	region		Returns all public keys whose private keys were used to sign the digest files within the specified time range. The public key is needed to validate digest files that were signed with its corresponding private key. CloudTrail uses different private and public key pairs per Region. Each digest file is signed with a private key unique to its Region. When you validate a digest file from a specific Region, you must look in the same Region for its corresponding public key.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_public_keys

Returns all public keys whose private keys were used to sign the digest files within the specified time range. The public key is needed to validate digest files that were signed with its corresponding private key. CloudTrail uses different private and public key pairs per Region. Each digest file is signed with a private key unique to its Region. When you validate a digest file from a specific Region, you must look in the same Region for its corresponding public key.

SELECT
fingerprint,
validity_end_time,
validity_start_time,
value
FROM aws.cloudtrail.public_keys
WHERE region = '{{ region }}' -- required
;