Querying a Grant¶
This section describes how to view the details about a grant on the KMS console, such as the grant ID, grantee user ID, granted operation, and creation time.
Prerequisites¶
You have created a grant.
Procedure¶
Log in to the management console.
Click
in the upper left corner of the management console and select a region or project.Click
. Choose Security > Key Management Service. The Key Management Service page is displayed.Click the alias of the desired CMK to view its details.
Click the Grants tab. Information about the CMK and grants created on it are displayed.
Table 1 describes the parameters.
Table 1 Parameter description¶ Parameter
Description
Grant ID
Randomly generated unique identification of a grant
Granted To
Whether permissions are granted to a user or account.
Grantee ID
ID of the authorized user or account.
Granted Operations
Authorized operations (such as Create Data Key) on the CMK
Creation Time
Creation time of the grant
Operation
Operations that can be performed on a grant. For example, you can revoke a grant.
Click a grant ID to view the grant details.