/* * Copyright 2010-2023 Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). * You may not use this file except in compliance with the License. * A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either * express or implied. See the License for the specific language governing * permissions and limitations under the License. */ package com.amazonaws.services.kms.model; import java.io.Serializable; import com.amazonaws.AmazonWebServiceRequest; /** *
* Imports or reimports key material into an existing KMS key that was created
* without key material. ImportKeyMaterial
also sets the expiration
* model and expiration date of the imported key material.
*
* By default, KMS keys are created with key material that KMS generates. This * operation supports Importing key material, an advanced feature that lets you generate and * import the cryptographic key material for a KMS key. For more information * about importing key material into KMS, see Importing key material in the Key Management Service Developer * Guide. *
** After you successfully import key material into a KMS key, you can reimport the same key material into that KMS key, but you cannot import * different key material. You might reimport key material to replace key * material that expired or key material that you deleted. You might also * reimport key material to change the expiration model or expiration date of * the key material. Before reimporting key material, if necessary, call * DeleteImportedKeyMaterial to delete the current imported key material. *
*
* Each time you import key material into KMS, you can determine whether (
* ExpirationModel
) and when (ValidTo
) the key
* material expires. To change the expiration of your key material, you must
* import it again, either by calling ImportKeyMaterial
or using
* the import features of the KMS console.
*
* Before calling ImportKeyMaterial
:
*
* Create or identify a KMS key with no key material. The KMS key must have an
* Origin
value of EXTERNAL
, which indicates that the
* KMS key is designed for imported key material.
*
* To create an new KMS key for imported key material, call the CreateKey
* operation with an Origin
value of EXTERNAL
. You can
* create a symmetric encryption KMS key, HMAC KMS key, asymmetric encryption
* KMS key, or asymmetric signing KMS key. You can also import key material into
* a multi-
* Region key of any supported type. However, you can't import key material
* into a KMS key in a custom key
* store.
*
* Use the DescribeKey operation to verify that the KeyState
* of the KMS key is PendingImport
, which indicates that the KMS
* key has no key material.
*
* If you are reimporting the same key material into an existing KMS key, you * might need to call the DeleteImportedKeyMaterial to delete its * existing key material. *
** Call the GetParametersForImport operation to get a public key and * import token set for importing key material. *
** Use the public key in the GetParametersForImport response to encrypt * your key material. *
*
* Then, in an ImportKeyMaterial
request, you submit your encrypted
* key material and import token. When calling this operation, you must specify
* the following values:
*
* The key ID or key ARN of the KMS key to associate with the imported key
* material. Its Origin
must be EXTERNAL
and its
* KeyState
must be PendingImport
. You cannot perform
* this operation on a KMS key in a custom key
* store, or on a KMS key in a different Amazon Web Services account. To get
* the Origin
and KeyState
of a KMS key, call
* DescribeKey.
*
* The encrypted key material. *
*
* The import token that GetParametersForImport returned. You must use a
* public key and token from the same GetParametersForImport
* response.
*
* Whether the key material expires (ExpirationModel
) and, if so,
* when (ValidTo
). For help with this choice, see Setting an expiration time in the Key Management Service Developer
* Guide.
*
* If you set an expiration date, KMS deletes the key material from the KMS key * on the specified date, making the KMS key unusable. To use the KMS key in * cryptographic operations again, you must reimport the same key material. * However, you can delete and reimport the key material at any time, including * before the key material expires. Each time you reimport, you can eliminate or * reset the expiration time. *
*
* When this operation is successful, the key state of the KMS key changes from
* PendingImport
to Enabled
, and you can use the KMS
* key in cryptographic operations.
*
* If this operation fails, use the exception to help determine the problem. If * the error is related to the key material, the import token, or wrapping key, * use GetParametersForImport to get a new public key and import token * for the KMS key and repeat the import procedure. For help, see How To Import Key Material in the Key Management Service Developer * Guide. *
** The KMS key that you use for this operation must be in a compatible key * state. For details, see Key states of KMS keys in the Key Management Service Developer * Guide. *
** Cross-account use: No. You cannot perform this operation on a KMS key * in a different Amazon Web Services account. *
** Required permissions: kms:ImportKeyMaterial (key policy) *
** Related operations: *
*
* The identifier of the KMS key that will be associated with the imported
* key material. This must be the same KMS key specified in the
* KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
of the KMS
* key must be EXTERNAL
and its KeyState
must be
* PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS key, * asymmetric encryption KMS key, or asymmetric signing KMS key, including a * multi- * Region key of any supported type. You cannot perform this operation * on a KMS key in a custom key store, or on a KMS key in a different Amazon * Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use ListKeys or * DescribeKey. *
*
* Constraints:
* Length: 1 - 2048
*/
private String keyId;
/**
*
* The import token that you received in the response to a previous * GetParametersForImport request. It must be from the same response * that contained the public key that you used to encrypt the key material. *
*
* Constraints:
* Length: 1 - 6144
*/
private java.nio.ByteBuffer importToken;
/**
*
* The encrypted key material to import. The key material must be encrypted
* under the public wrapping key that GetParametersForImport
* returned, using the wrapping algorithm that you specified in the same
* GetParametersForImport
request.
*
* Constraints:
* Length: 1 - 6144
*/
private java.nio.ByteBuffer encryptedKeyMaterial;
/**
*
* The date and time when the imported key material expires. This parameter
* is required when the value of the ExpirationModel
parameter
* is KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. The maximum * value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material from the KMS * key. Without its key material, the KMS key is unusable. To use the KMS * key in cryptographic operations, you must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*/
private String expirationModel;
/**
*
* The identifier of the KMS key that will be associated with the imported
* key material. This must be the same KMS key specified in the
* KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
of the KMS
* key must be EXTERNAL
and its KeyState
must be
* PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS key, * asymmetric encryption KMS key, or asymmetric signing KMS key, including a * multi- * Region key of any supported type. You cannot perform this operation * on a KMS key in a custom key store, or on a KMS key in a different Amazon * Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use ListKeys or * DescribeKey. *
*
* Constraints:
* Length: 1 - 2048
*
* @return
* The identifier of the KMS key that will be associated with the
* imported key material. This must be the same KMS key specified in
* the KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
of
* the KMS key must be EXTERNAL
and its
* KeyState
must be PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS key, * asymmetric encryption KMS key, or asymmetric signing KMS key, * including a multi-Region key of any supported type. You cannot perform * this operation on a KMS key in a custom key store, or on a KMS * key in a different Amazon Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use ListKeys * or DescribeKey. *
*/ public String getKeyId() { return keyId; } /** *
* The identifier of the KMS key that will be associated with the imported
* key material. This must be the same KMS key specified in the
* KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
of the KMS
* key must be EXTERNAL
and its KeyState
must be
* PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS key, * asymmetric encryption KMS key, or asymmetric signing KMS key, including a * multi- * Region key of any supported type. You cannot perform this operation * on a KMS key in a custom key store, or on a KMS key in a different Amazon * Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use ListKeys or * DescribeKey. *
*
* Constraints:
* Length: 1 - 2048
*
* @param keyId
* The identifier of the KMS key that will be associated with the
* imported key material. This must be the same KMS key specified
* in the KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
* of the KMS key must be EXTERNAL
and its
* KeyState
must be PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS * key, asymmetric encryption KMS key, or asymmetric signing KMS * key, including a multi-Region key of any supported type. You cannot * perform this operation on a KMS key in a custom key store, or * on a KMS key in a different Amazon Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use * ListKeys or DescribeKey. *
*/ public void setKeyId(String keyId) { this.keyId = keyId; } /** *
* The identifier of the KMS key that will be associated with the imported
* key material. This must be the same KMS key specified in the
* KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
of the KMS
* key must be EXTERNAL
and its KeyState
must be
* PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS key, * asymmetric encryption KMS key, or asymmetric signing KMS key, including a * multi- * Region key of any supported type. You cannot perform this operation * on a KMS key in a custom key store, or on a KMS key in a different Amazon * Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use ListKeys or * DescribeKey. *
** Returns a reference to this object so that method calls can be chained * together. *
* Constraints:
* Length: 1 - 2048
*
* @param keyId
* The identifier of the KMS key that will be associated with the
* imported key material. This must be the same KMS key specified
* in the KeyID
parameter of the corresponding
* GetParametersForImport request. The Origin
* of the KMS key must be EXTERNAL
and its
* KeyState
must be PendingImport
.
*
* The KMS key can be a symmetric encryption KMS key, HMAC KMS * key, asymmetric encryption KMS key, or asymmetric signing KMS * key, including a multi-Region key of any supported type. You cannot * perform this operation on a KMS key in a custom key store, or * on a KMS key in a different Amazon Web Services account. *
** Specify the key ID or key ARN of the KMS key. *
** For example: *
*
* Key ID: 1234abcd-12ab-34cd-56ef-1234567890ab
*
* Key ARN:
* arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
*
* To get the key ID and key ARN for a KMS key, use * ListKeys or DescribeKey. *
* @return A reference to this updated object so that method calls can be * chained together. */ public ImportKeyMaterialRequest withKeyId(String keyId) { this.keyId = keyId; return this; } /** ** The import token that you received in the response to a previous * GetParametersForImport request. It must be from the same response * that contained the public key that you used to encrypt the key material. *
*
* Constraints:
* Length: 1 - 6144
*
* @return
* The import token that you received in the response to a previous * GetParametersForImport request. It must be from the same * response that contained the public key that you used to encrypt * the key material. *
*/ public java.nio.ByteBuffer getImportToken() { return importToken; } /** ** The import token that you received in the response to a previous * GetParametersForImport request. It must be from the same response * that contained the public key that you used to encrypt the key material. *
*
* Constraints:
* Length: 1 - 6144
*
* @param importToken
* The import token that you received in the response to a * previous GetParametersForImport request. It must be * from the same response that contained the public key that you * used to encrypt the key material. *
*/ public void setImportToken(java.nio.ByteBuffer importToken) { this.importToken = importToken; } /** ** The import token that you received in the response to a previous * GetParametersForImport request. It must be from the same response * that contained the public key that you used to encrypt the key material. *
** Returns a reference to this object so that method calls can be chained * together. *
* Constraints:
* Length: 1 - 6144
*
* @param importToken
* The import token that you received in the response to a * previous GetParametersForImport request. It must be * from the same response that contained the public key that you * used to encrypt the key material. *
* @return A reference to this updated object so that method calls can be * chained together. */ public ImportKeyMaterialRequest withImportToken(java.nio.ByteBuffer importToken) { this.importToken = importToken; return this; } /** *
* The encrypted key material to import. The key material must be encrypted
* under the public wrapping key that GetParametersForImport
* returned, using the wrapping algorithm that you specified in the same
* GetParametersForImport
request.
*
* Constraints:
* Length: 1 - 6144
*
* @return
* The encrypted key material to import. The key material must be
* encrypted under the public wrapping key that
* GetParametersForImport returned, using the wrapping
* algorithm that you specified in the same
* GetParametersForImport
request.
*
* The encrypted key material to import. The key material must be encrypted
* under the public wrapping key that GetParametersForImport
* returned, using the wrapping algorithm that you specified in the same
* GetParametersForImport
request.
*
* Constraints:
* Length: 1 - 6144
*
* @param encryptedKeyMaterial
* The encrypted key material to import. The key material must be
* encrypted under the public wrapping key that
* GetParametersForImport returned, using the wrapping
* algorithm that you specified in the same
* GetParametersForImport
request.
*
* The encrypted key material to import. The key material must be encrypted
* under the public wrapping key that GetParametersForImport
* returned, using the wrapping algorithm that you specified in the same
* GetParametersForImport
request.
*
* Returns a reference to this object so that method calls can be chained * together. *
* Constraints:
* Length: 1 - 6144
*
* @param encryptedKeyMaterial
* The encrypted key material to import. The key material must be
* encrypted under the public wrapping key that
* GetParametersForImport returned, using the wrapping
* algorithm that you specified in the same
* GetParametersForImport
request.
*
* The date and time when the imported key material expires. This parameter
* is required when the value of the ExpirationModel
parameter
* is KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. The maximum * value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material from the KMS * key. Without its key material, the KMS key is unusable. To use the KMS * key in cryptographic operations, you must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key material.
*
* The date and time when the imported key material expires. This
* parameter is required when the value of the
* ExpirationModel
parameter is
* KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. The * maximum value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material from * the KMS key. Without its key material, the KMS key is unusable. * To use the KMS key in cryptographic operations, you must reimport * the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key material.
*
* The date and time when the imported key material expires. This parameter
* is required when the value of the ExpirationModel
parameter
* is KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. The maximum * value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material from the KMS * key. Without its key material, the KMS key is unusable. To use the KMS * key in cryptographic operations, you must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key material.
*
* The date and time when the imported key material expires. This
* parameter is required when the value of the
* ExpirationModel
parameter is
* KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. * The maximum value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material * from the KMS key. Without its key material, the KMS key is * unusable. To use the KMS key in cryptographic operations, you * must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key
* material.
*
* The date and time when the imported key material expires. This parameter
* is required when the value of the ExpirationModel
parameter
* is KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. The maximum * value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material from the KMS * key. Without its key material, the KMS key is unusable. To use the KMS * key in cryptographic operations, you must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key material.
*
* Returns a reference to this object so that method calls can be chained * together. * * @param validTo
* The date and time when the imported key material expires. This
* parameter is required when the value of the
* ExpirationModel
parameter is
* KEY_MATERIAL_EXPIRES
. Otherwise it is not valid.
*
* The value of this parameter must be a future date and time. * The maximum value is 365 days from the request date. *
** When the key material expires, KMS deletes the key material * from the KMS key. Without its key material, the KMS key is * unusable. To use the KMS key in cryptographic operations, you * must reimport the same key material. *
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must delete
* (DeleteImportedKeyMaterial) and reimport the key
* material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*
* @return
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see
* Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for
* the ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must reimport the
* key material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*
* @param expirationModel
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice,
* see Setting an expiration time in the Key Management
* Service Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value
* for the ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must reimport
* the key material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Returns a reference to this object so that method calls can be chained * together. *
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*
* @param expirationModel
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice,
* see Setting an expiration time in the Key Management
* Service Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value
* for the ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must reimport
* the key material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*
* @param expirationModel
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice,
* see Setting an expiration time in the Key Management
* Service Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value
* for the ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must reimport
* the key material.
*
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice, see Setting an expiration time in the Key Management Service
* Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value for the
* ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the request
* completes. To change either value, you must reimport the key material.
*
* Returns a reference to this object so that method calls can be chained * together. *
* Constraints:
* Allowed Values: KEY_MATERIAL_EXPIRES, KEY_MATERIAL_DOES_NOT_EXPIRE
*
* @param expirationModel
* Specifies whether the key material expires. The default is
* KEY_MATERIAL_EXPIRES
. For help with this choice,
* see Setting an expiration time in the Key Management
* Service Developer Guide.
*
* When the value of ExpirationModel
is
* KEY_MATERIAL_EXPIRES
, you must specify a value
* for the ValidTo
parameter. When value is
* KEY_MATERIAL_DOES_NOT_EXPIRE
, you must omit the
* ValidTo
parameter.
*
* You cannot change the ExpirationModel
or
* ValidTo
values for the current import after the
* request completes. To change either value, you must reimport
* the key material.
*