Editing keys - Amazon Key Management Service
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China.

Editing keys

You can change the following properties of your KMS keys in the Amazon KMS console and the Amazon KMS API.

Description

You can change the key description on the details page for the KMS key or by using the UpdateKeyDescription operation.

To edit the key description in the console, in the upper right corner of the details page for the KMS key, choose Edit.

Key policy

You can change the key policy on the Key policy tab of the details page for the KMS key or by using the PutKeyPolicy operation.

For details, see Changing a key policy.

Tags

You can create and delete tags on the Tags tab of the details page for the KMS key or by using the TagResource and UntagResource operations.

For details, see Tagging keys.

Enable and disable

You can enable and disable KMS keys of the Customer managed keys or Amazon managed keys pages of the Amazon KMS console. Or you can use the EnableKey and DisableKey operations.

For details, see Enabling and disabling keys.

Automatic key rotation

You can enable and disable automatic key rotation on the Key rotation tab of the details page for the KMS key or by using the EnableKeyRotation and DisableKeyRotation operations.

For details, see Rotating Amazon KMS keys.

See also

Updating aliases