parameters_for_exports
Creates, updates, deletes, gets or lists a parameters_for_exports resource.
Overview
| Name | parameters_for_exports |
| Type | Resource |
| Id | aws.payment_cryptography.parameters_for_exports |
Fields
The following fields are returned by SELECT queries:
- get_parameters_for_export
| Name | Datatype | Description |
|---|---|---|
export_token | string | The export token to initiate key export from Amazon Web Services Payment Cryptography. The export token expires after 30 days. You can use the same export token to export multiple keys from the same service account. (pattern: <code>(export-token-[0-9a-zA-Z]{16,64})?</code>) |
parameters_valid_until_timestamp | string (date-time) | The validity period of the export token. |
signing_key_algorithm | string | The algorithm of the signing key certificate for use in TR-34 key block generation. RSA_2048 is the only signing key algorithm allowed. (TDES_2KEY, TDES_3KEY, AES_128, AES_192, AES_256, HMAC_SHA256, HMAC_SHA384, HMAC_SHA512, HMAC_SHA224, RSA_2048, RSA_3072, RSA_4096, ECC_NIST_P256, ECC_NIST_P384, ECC_NIST_P521) |
signing_key_certificate | string | The signing key certificate in PEM format (base64 encoded) of the public key for signature within the TR-34 key block. The certificate expires after 30 days. (pattern: <code>[^[;]<>]+</code>) |
signing_key_certificate_chain | string | The root certificate authority (CA) that signed the signing key certificate in PEM format (base64 encoded). (pattern: <code>[^[;]<>]+</code>) |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_parameters_for_export | select | region | Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography. The signing key certificate signs the wrapped key under export within the TR-34 key payload. The export token and signing key certificate must be in place and operational before calling ExportKey. The export token expires in 30 days. You can use the same export token to export multiple keys from your service account. To return a previously generated export token and signing key certificate instead of generating new ones, set ReuseLastGeneratedToken to true. Cross-account use: This operation can't be used across different Amazon Web Services accounts. Related operations: ExportKey GetParametersForImport |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- get_parameters_for_export
Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography. The signing key certificate signs the wrapped key under export within the TR-34 key payload. The export token and signing key certificate must be in place and operational before calling ExportKey. The export token expires in 30 days. You can use the same export token to export multiple keys from your service account. To return a previously generated export token and signing key certificate instead of generating new ones, set ReuseLastGeneratedToken to true. Cross-account use: This operation can't be used across different Amazon Web Services accounts. Related operations: ExportKey GetParametersForImport
SELECT
export_token,
parameters_valid_until_timestamp,
signing_key_algorithm,
signing_key_certificate,
signing_key_certificate_chain
FROM aws.payment_cryptography.parameters_for_exports
WHERE region = '{{ region }}' -- required
;