|
117 | 117 | * HMAC codes for messages up to 4096 bytes. |
118 | 118 | * </p> |
119 | 119 | * <p> |
120 | | - * HMAC KMS keys are not supported in all Amazon Web Services Regions. If you |
121 | | - * try to create an HMAC KMS key in an Amazon Web Services Region in which HMAC |
122 | | - * keys are not supported, the <code>CreateKey</code> operation returns an |
123 | | - * <code>UnsupportedOperationException</code>. For a list of Regions in which |
124 | | - * HMAC KMS keys are supported, see <a |
125 | | - * href="https://docs.aws.amazon.com/kms/latest/developerguide/hmac.html">HMAC |
126 | | - * keys in KMS</a> in the <i>Key Management Service Developer Guide</i>. |
127 | | - * </p> |
128 | | - * <p> |
129 | 120 | * </p></dd> |
130 | 121 | * <dt>Multi-Region primary keys</dt> |
131 | 122 | * <dt>Imported key material</dt> |
|
162 | 153 | * </p></dd> |
163 | 154 | * <dd> |
164 | 155 | * <p> |
165 | | - * To import your own key material into a KMS key, begin by creating a symmetric |
166 | | - * encryption KMS key with no key material. To do this, use the |
167 | | - * <code>Origin</code> parameter of <code>CreateKey</code> with a value of |
168 | | - * <code>EXTERNAL</code>. Next, use <a>GetParametersForImport</a> operation to |
169 | | - * get a public key and import token, and use the public key to encrypt your key |
170 | | - * material. Then, use <a>ImportKeyMaterial</a> with your import token to import |
171 | | - * the key material. For step-by-step instructions, see <a href= |
| 156 | + * To import your own key material into a KMS key, begin by creating a KMS key |
| 157 | + * with no key material. To do this, use the <code>Origin</code> parameter of |
| 158 | + * <code>CreateKey</code> with a value of <code>EXTERNAL</code>. Next, use |
| 159 | + * <a>GetParametersForImport</a> operation to get a public key and import token. |
| 160 | + * Use the wrapping public key to encrypt your key material. Then, use |
| 161 | + * <a>ImportKeyMaterial</a> with your import token to import the key material. |
| 162 | + * For step-by-step instructions, see <a href= |
172 | 163 | * "https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html" |
173 | 164 | * >Importing Key Material</a> in the <i> <i>Key Management Service Developer |
174 | 165 | * Guide</i> </i>. |
175 | 166 | * </p> |
176 | 167 | * <p> |
177 | | - * This feature supports only symmetric encryption KMS keys, including |
178 | | - * multi-Region symmetric encryption KMS keys. You cannot import key material |
179 | | - * into any other type of KMS key. |
| 168 | + * You can import key material into KMS keys of all supported KMS key types: |
| 169 | + * symmetric encryption KMS keys, HMAC KMS keys, asymmetric encryption KMS keys, |
| 170 | + * and asymmetric signing KMS keys. You can also create multi-Region keys with |
| 171 | + * imported key material. However, you can't import key material into a KMS key |
| 172 | + * in a custom key store. |
180 | 173 | * </p> |
181 | 174 | * <p> |
182 | 175 | * To create a multi-Region primary key with imported key material, use the |
|
0 commit comments