alicloud_kms_instance

Provides a KMS Instance resource.

For information about KMS Instance and how to use it, see What is Instance.

-> NOTE: Available since v1.210.0.

Example Usage

Basic Usage

variable "name" {
  default = "terraform-example"
}

provider "alicloud" {
  region = "cn-hangzhou"
}

data "alicloud_vpcs" "default" {
  name_regex = "^default-NODELETING$"
  cidr_block = "172.16.0.0/16"
}
data "alicloud_vswitches" "default" {
  vpc_id  = data.alicloud_vpcs.default.ids.0
  zone_id = "cn-hangzhou-k"
}

resource "alicloud_kms_instance" "default" {
  product_version = "3"
  vpc_id          = data.alicloud_vpcs.default.ids.0
  zone_ids = [
    "cn-hangzhou-k",
    "cn-hangzhou-j"
  ]
  vswitch_ids = [
    data.alicloud_vswitches.default.ids.0
  ]
  vpc_num    = "1"
  key_num    = "1000"
  secret_num = "0"
  spec       = "1000"
}

# Save Instance's CA certificate chain to a local file
# resource "local_file" "ca_certificate_chain_pem" {
#   content  = alicloud_kms_instance.default.ca_certificate_chain_pem
#   filename = "ca.pem"
# }

Argument Reference

The following arguments are supported:

• bind_vpcs - (Optional) Aucillary VPCs used to access this KMS instance. See bind_vpcs below.
• key_num - (Required) Maximum number of stored keys.
• log - (Optional, Computed) Instance Audit Log Switch.
• log_storage - (Optional, Computed) Instance log capacity.
• period - (Optional) Purchase cycle, in months.
• product_version - (Optional) KMS Instance commodity type (software/hardware).
• renew_period - (Optional) Automatic renewal period, in months.
• renew_status - (Optional) Renewal options (manual renewal, automatic renewal, no renewal).
• secret_num - (Required) Maximum number of Secrets.
• spec - (Required) The computation performance level of the KMS instance.
• vpc_id - (Required, ForceNew) Instance VPC id.
• vpc_num - (Required) The number of managed accesses. The maximum number of VPCs that can access this KMS instance.
• vswitch_ids - (Required, ForceNew) Instance bind vswitches.
• zone_ids - (Required, ForceNew) zone id.

bind_vpcs

The bind_vpcs supports the following:

• region_id - (Optional) region id.
• vswitch_id - (Optional) vswitch id.
• vpc_id - (Optional) VPC ID.
• vpc_owner_id - (Optional) VPC owner root user ID.

Attributes Reference

The following attributes are exported:

• id - The ID of the resource supplied above.
• ca_certificate_chain_pem - KMS instance certificate chain in PEM format.
• create_time - The creation time of the resource.
• instance_name - The name of the resource.
• status - Instance status.

Timeouts

The timeouts block allows you to specify timeouts for certain actions:

• create - (Defaults to 60 mins) Used when create the Instance.
• delete - (Defaults to 10 mins) Used when delete the Instance.
• update - (Defaults to 60 mins) Used when update the Instance.

Import

KMS Instance can be imported using the id, e.g.

$ terraform import alicloud_kms_instance.example <id>