ACS-KMS-BulkyUpdateRotationPolicy

Template name

ACS-KMS-BulkyUpdateRotationPolicy

Execute Now

Template description

Updates the rotation policy for one or more keys in bulk.

Template type

Automated

Owner

Alibaba Cloud

Input parameters

Parameter	Description	Data type	Required	Default value	Limit
keyIds	The IDs of the keys whose rotation policy you want to update.	List	Yes
rotationInterval	The interval for automatic key rotation.	String	Yes
regionId	The region ID.	String	No	{{ ACS::RegionId }}
rateControl	The rate control configuration for task execution.	Json	No	{'Mode': 'Concurrency', 'MaxErrors': 0, 'Concurrency': 10}
OOSAssumeRole	The RAM role assumed by CloudOps Orchestration Service (OOS) to execute this template.	String	No	""

Output parameters

N/A.

Required permission policy

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "kms:UpdateRotationPolicy"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

References

ACS-KMS-BulkyUpdateRotationPolicy

Template content

FormatVersion: OOS-2019-06-01
Description:
  en: Update rotation policy
  name-en: ACS-KMS-BulkyUpdateRotationPolicy
  categories:
    - security
Parameters:
  regionId:
    Type: String
    Label:
      en: RegionId
    AssociationProperty: RegionId
    Default: '{{ ACS::RegionId }}'
  keyIds:
    Label:
      en: KeyIds
    Type: List
  rotationInterval:
    Label:
      en: RotationInterval
    Type: String
  rateControl:
    Label:
      en: RateControl
    Type: Json
    AssociationProperty: RateControl
    Default:
      Mode: Concurrency
      MaxErrors: 0
      Concurrency: 10
  OOSAssumeRole:
    Label:
      en: OOSAssumeRole
    Type: String
    Default: ''
RamRole: '{{ OOSAssumeRole }}'
Tasks:
  - Name: updateRotationPolicy
    Action: 'ACS::ExecuteAPI'
    Description:
      en: Update rotation policy
    Properties:
      Service: KMS
      API: UpdateRotationPolicy
      Parameters:
        RegionId: '{{ regionId }}'
        KeyId: '{{ ACS::TaskLoopItem }}'
        EnableAutomaticRotation: true
        RotationInterval: '{{ rotationInterval }}'
    Loop:
      RateControl: '{{ rateControl }}'
      Items: '{{ keyIds }}'