alicloud_kms_application_access_point

Provides a KMS Application Access Point resource. An application access point (AAP) is used to implement fine-grained access control for Key Management Service (KMS) resources. An application can access a KMS instance only after an AAP is created for the application. .

For information about KMS Application Access Point and how to use it, see What is Application Access Point.

-> NOTE: Available since v1.210.0.

Example Usage

Basic Usage

variable "name" {
  default = "terraform-example"
}


resource "alicloud_kms_application_access_point" "default" {
  description                   = "example aap"
  application_access_point_name = var.name
  policies                      = ["abc", "efg", "hfc"]
}

Argument Reference

The following arguments are supported:

• application_access_point_name - (Required, ForceNew) Application Access Point Name.
• description - (Optional) Description .
• policies - (Required) The policies that have bound to the Application Access Point (AAP).

Attributes Reference

The following attributes are exported:

• id - The ID of the resource supplied above.

Timeouts

The timeouts block allows you to specify timeouts for certain actions:

• create - (Defaults to 5 mins) Used when create the Application Access Point.
• delete - (Defaults to 5 mins) Used when delete the Application Access Point.
• update - (Defaults to 5 mins) Used when update the Application Access Point.

Import

KMS Application Access Point can be imported using the id, e.g.

$ terraform import alicloud_kms_application_access_point.example <id>