keyMaterialState
There are three possible values for this field: CURRENT
, NON_CURRENT
and PENDING_ROTATION
. KMS uses CURRENT
key material for both encryption and decryption and NON_CURRENT
key material only for decryption. PENDING_ROTATION
identifies key material that has been imported for on-demand key rotation but the rotation hasn't completed. Key material in PENDING_ROTATION
is not permanently associated with the KMS key. You can delete this key material and import different key material in its place. The PENDING_ROTATION
value is only used in symmetric encryption keys with imported key material. The other values, CURRENT
and NON_CURRENT
, are used for all KMS keys that support automatic or on-demand key rotation.