Sign in

v50

latestOpenAPI 3.1.0Apache 2.0raw.githubusercontent.com2026-07-068428533.0 MB
CMEK

Get a CMEK

Get a customer managed encryption key.

get/v1/cmeks/{cmekId}

Response

A CMEK

idstring required
key_arnstring required

The Amazon Resource Name (ARN) of the Key Management Service (KMS) key to use for encryption and decryption. We recommend using one multi-region key (MRK) per Konnect region to enhance security and compliance, while also supporting failover to other AWS regions.

namestring required

The name of the CMEK. We recommend you match the key's name used in KMS.

descriptionstring

An optional description of the CMEK.

created_atstring date-time required

An ISO-8601 timestamp representation of entity creation date.

updated_atstring date-time required

An ISO-8601 timestamp representation of entity update date.

Example response

{
  "key_arn": "arn:aws:kms:us-east-1:123456789012:key/mrk-12345678123412341234123456789012",
  "name": "My KMS Key",
  "description": "My Key Description",
  "created_at": "2022-11-04T20:10:06.927Z",
  "updated_at": "2022-11-04T20:10:06.927Z"
}