class Aws::KMS::Types::RetireGrantRequest
@note When making an API call, you may pass RetireGrantRequest
data as a hash: { grant_token: "GrantTokenType", key_id: "KeyIdType", grant_id: "GrantIdType", }
@!attribute [rw] grant_token
Identifies the grant to be retired. You can use a grant token to identify a new grant even before it has achieved eventual consistency. Only the CreateGrant operation returns a grant token. For details, see [Grant token][1] and [Eventual consistency][2] in the *Key Management Service Developer Guide*. [1]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#grant_token [2]: https://docs.aws.amazon.com/kms/latest/developerguide/grants.html#terms-eventual-consistency @return [String]
@!attribute [rw] key_id
The key ARN KMS key associated with the grant. To find the key ARN, use the ListKeys operation. For example: `arn:aws:kms:us-east-2:444455556666:key/1234abcd-12ab-34cd-56ef-1234567890ab` @return [String]
@!attribute [rw] grant_id
Identifies the grant to retire. To get the grant ID, use CreateGrant, ListGrants, or ListRetirableGrants. * Grant ID Example - 0123456789012345678901234567890123456789012345678901234567890123 ^ @return [String]
@see docs.aws.amazon.com/goto/WebAPI/kms-2014-11-01/RetireGrantRequest AWS API Documentation
Constants
- SENSITIVE