keyMaterialId

Identifies the key material being imported. This parameter is optional and only usable with symmetric encryption keys. You cannot specify a key material ID with ImportType set to NEW_KEY_MATERIAL. Whenever you import key material into a symmetric encryption key, KMS assigns a unique identifier to the key material based on the KMS key ID and the imported key material. When you re-import key material with a specified key material ID, KMS:

  • Computes the identifier for the key material

  • Matches the computed identifier against the specified key material ID

  • Verifies that the key material ID is already associated with the KMS key

To get the list of key material IDs associated with a KMS key, use ListKeyRotations.