Data Source: oci_kms_key_versions

This data source provides the list of Key Versions in Oracle Cloud Infrastructure Kms service.

Lists all KeyVersion resources for the specified master encryption key.

As a management operation, this call is subject to a Key Management limit that applies to the total number of requests across all management read operations. Key Management might throttle this call to reject an otherwise valid request when the total rate of management read operations exceeds 10 requests per second for a given tenancy.

Example Usage

data "oci_kms_key_versions" "test_key_versions" {
	#Required
	key_id = oci_kms_key.test_key.id
	management_endpoint = var.key_version_management_endpoint
}

Argument Reference

The following arguments are supported:

• key_id - (Required) The OCID of the key.
• management_endpoint - (Required) The service endpoint to perform management operations against. Management operations include ‘Create,’ ‘Update,’ ‘List,’ ‘Get,’ and ‘Delete’ operations. See Vault Management endpoint.

Attributes Reference

The following attributes are exported:

• key_versions - The list of key_versions.

KeyVersion Reference

The following attributes are exported:

• compartment_id - The OCID of the compartment that contains this key version.
• external_key_reference_details - Key reference data to be returned to the customer as a response.
  • external_key_id - ExternalKeyId refers to the globally unique key Id associated with the key created in external vault in CTM.
  • external_key_version_id - Key version ID associated with the external key.
• id - The OCID of the key version.
• is_auto_rotated - An optional property indicating whether this keyversion is generated from auto rotatation.
• is_primary - A Boolean value that indicates whether the KeyVersion belongs to primary Vault or replica Vault.
• key_id - The OCID of the master encryption key associated with this key version.
• public_key - The public key in PEM format. (This value pertains only to RSA and ECDSA keys.)
• replica_details - KeyVersion replica details
  • replication_id - ReplicationId associated with a key version operation
• restored_from_key_version_id - The OCID of the key version from which this key version was restored.
• state - The key version’s current lifecycle state. Example: ENABLED
• key_version_id - The OCID of the key version.
• time_created - The date and time this key version was created, expressed in RFC 3339 timestamp format. Example: “2018-04-03T21:10:29.600Z”
• time_of_deletion - An optional property to indicate when to delete the key version, expressed in RFC 3339 timestamp format. Example: 2019-04-03T21:10:29.600Z
• vault_id - The OCID of the vault that contains this key version.