February 2020
Intermediate to advanced
440 pages
13h 51m
English
In this recipe, we granted permission to the testuser user using the create-grant subcommand of the aws kms CLI command. We verified that the user could not perform encryption before granting permission. We verified that testuser could perform encryption after granting permission.
Then, we revoked the grant using the revoke-grant subcommand of the aws kms CLI command. We also used other subcommands, such as list-grants to list the grants for a particular key ID and encrypt to encrypt the plain text.
Read now
Unlock full access