Manage key material for “external” keys.
put_kms_material(key, material, token, expires = TRUE, valid_to = NULL, ...)delete_kms_material(key, ...)
get_material_parameters(
key,
algorithm = c("RSAES_PKCS1_V1_5", "RSAES_OAEP_SHA_1", "RSAES_OAEP_SHA_256"),
spec = "RSA_2048",
...
)
A character string specifying a key ID, Amazon Resource Name (ARN), alias name, or alias ARN. When using an alias name, prefix it with “alias/”.
A character string specifying the base64-encoded key material (encrypted according to parameters returned by get_material_parameters).
A character string returned in get_material_parameters()$ImportToken.
Optionally, a logical indicating whether the key material expires. If TRUE (the default), valid_to is required.
Optionally (if expires = TRUE), a number specifying when the key material expires.
Additional arguments passed to kmsHTTP.
A character string specifying an encryption algorithm used to encrypt the key material.
Ignored.
put_kms_material adds key material to an “external” KMS key, which can be created using create_kms_key. The import requires delete_kms_material deletes the imported material (but not the key itself).
https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys-encrypt-key-material.html