Use the key delete command in CloudHSM CLI to delete a key from an AWS CloudHSM cluster. You can only delete one key at a time. Deleting one key in a key pair has no effect on the other key in the pair.
Only the CU who created the key and consequently owns it can delete the key. Users who share the key, but do not own it, can use the key in cryptographic operations, but can not delete it.
User typeThe following types of users can run this command.
RequirementsTo run this command, you must be logged in as a CU.
aws-cloudhsm >
help key delete
Delete a key in the HSM cluster
Usage: key delete [OPTIONS] --filter [<FILTER>
...]
Options:
--cluster-id <CLUSTER_ID>
Unique Id to choose which of the clusters in the config file to run the operation against. If not provided, will fall back to the value provided when interactive mode was started, or error
--filter [<FILTER>
...] Key reference (e.g. key-reference=0xabc) or space separated list of key attributes in the form of attr.KEY_ATTRIBUTE_NAME=KEY_ATTRIBUTE_VALUE to select a matching key for deletion
-h, --help Print help
Example
aws-cloudhsm >
key delete --filter attr.label="ec-test-public-key"
{
"error_code": 0,
"data": {
"message": "Key deleted successfully"
}
}
Arguments
<CLUSTER_ID>
The ID of the cluster to run this operation on.
Required: If multiple clusters have been configured.
<FILTER>
Key reference (for example, key-reference=0xabc
) or space separated list of key attributes in the form of attr.KEY_ATTRIBUTE_NAME=KEY_ATTRIBUTE_VALUE
to select a matching key for deletion.
For a list of supported CloudHSM CLI key attributes, see Key attributes for CloudHSM CLI
Required: Yes
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4