25 lines
572 B
Plaintext
25 lines
572 B
Plaintext
---
|
|
layout: docs
|
|
page_title: KMS AEAD - Configuration
|
|
sidebar_title: KMS AEAD
|
|
description: |-
|
|
The KMS AEAD configures KMS-specifc parameters.
|
|
---
|
|
|
|
```hcl
|
|
kms "aead" {
|
|
purpose = "worker-auth"
|
|
aead_type = "aes-gcm"
|
|
key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
|
|
key_id = "global_worker-auth"
|
|
}
|
|
```
|
|
|
|
- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `root`, and `recovery`.
|
|
|
|
- `aead_type` - The type of encryption this KMS uses.
|
|
|
|
- `key` - Optional, a hard coded key if not using an external KMS.
|
|
|
|
- `key_id` - The unique name of this key.
|