DeleteImportedKeyMaterial - Amazon Key Management Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.


If you import key material into a KMS key, you can delete the imported key material at any time by using the DeleteImportedKeyMaterial operation. When you delete imported key material from a KMS key, the key state of the KMS key changes to PendingImport and the KMS key cannot be used in any cryptographic operations. For details, see Deleting imported key material.

The following example shows an Amazon CloudTrail log entry generated for the DeleteImportedKeyMaterial operation.

{ "eventVersion": "1.08", "userIdentity": { "type": "IAMUser", "principalId": "EX_PRINCIPAL_ID", "arn": "arn:aws:iam::111122223333:user/Alice", "accountId": "111122223333", "accessKeyId": "EXAMPLE_KEY_ID", "userName": "Alice" }, "eventTime": "2022-10-04T21:43:33Z", "eventSource": "", "eventName": "DeleteImportedKeyMaterial", "awsRegion": "us-west-2", "sourceIPAddress": "", "userAgent": "Amazon Internal", "requestParameters": { "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab" }, "responseElements": { "keyId":"&example-key-arn-1;" }, "requestID": "dcf0e82f-dad0-4622-a378-a5b964ad42c1", "eventID": "2afbb991-c668-4641-8a00-67d62e1fecbd", "readOnly": false, "resources": [ { "accountId": "111122223333", "type": "AWS::KMS::Key", "ARN": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" } ], "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "111122223333", "eventCategory": "Management" }