Sign in

v10

latestOpenAPI 3.0.4raw.githubusercontent.com2026-07-0750111126.8 KB
Rotations

List KMS key rotation records

Lists key rotation records, including same-provider rotations and cross-provider migration rotations.

get/{tenantId}/kms/rotations

Query parameters

providerIdstring

Filter by source provider id.

keyAliasstring

Filter by source key alias.

status'ACTIVE' | 'ROTATING' | 'ROTATED' | 'REVOKED' | 'DEPRECATED'

Lifecycle status for a KMS key or rotation record.

Filter by rotation lifecycle status.

Response

Matching rotation records.

Example response

{
  "rotations": [
    {
      "rotationId": "rotation-001",
      "tenantId": "tenant-001",
      "oldKey": {
        "providerId": "software",
        "keyAlias": "as-signing"
      },
      "newKey": {
        "providerId": "software",
        "keyAlias": "as-signing"
      },
      "targetProviderId": "azure-key-vault",
      "rotatedAssignments": [
        "assignment-001"
      ],
      "createdAssignments": [
        "assignment-002"
      ],
      "rotationInterval": "P3M",
      "rotateAt": "2026-09-18T10:15:30Z",
      "createdAt": "2026-06-18T10:15:30Z",
      "updatedAt": "2026-06-18T10:15:30Z"
    }
  ]
}