instance_tpm_ek_pubs

Creates, updates, deletes, gets or lists an instance_tpm_ek_pubs resource.

Overview

Name	instance_tpm_ek_pubs
Type	Resource
Id	aws.ec2.instance_tpm_ek_pubs

Fields

The following fields are returned by SELECT queries:

get_instance_tpm_ek_pub

Name	Datatype	Description
instance_id	string	The ID of the instance.
key_format	string	The public endorsement key format.
key_type	string	The public endorsement key type.
key_value	string	The public endorsement key material.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_instance_tpm_ek_pub	select	InstanceId, KeyType, KeyFormat, region	DryRun	Gets the public endorsement key associated with the Nitro Trusted Platform Module (NitroTPM) for the specified instance.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
InstanceId	string	The ID of the instance for which to get the public endorsement key.
KeyFormat	string	The required public endorsement key format. Specify der for a DER-encoded public key that is compatible with OpenSSL. Specify tpmt for a TPM 2.0 format that is compatible with tpm2-tools. The returned key is base64 encoded.
KeyType	string	The required public endorsement key type.
region	string	AWS region (default: us-east-1)
DryRun	boolean	Specify this parameter to verify whether the request will succeed, without actually making the request. If the request will succeed, the response is DryRunOperation. Otherwise, the response is UnauthorizedOperation.

SELECT examples

get_instance_tpm_ek_pub

Gets the public endorsement key associated with the Nitro Trusted Platform Module (NitroTPM) for the specified instance.

SELECT
instance_id,
key_format,
key_type,
key_value
FROM aws.ec2.instance_tpm_ek_pubs
WHERE InstanceId = '{{ InstanceId }}' -- required
AND KeyType = '{{ KeyType }}' -- required
AND KeyFormat = '{{ KeyFormat }}' -- required
AND region = '{{ region }}' -- required
AND DryRun = '{{ DryRun }}'
;