BedrockAgentCoreControl / Client / set_token_vault_cmk

set_token_vault_cmk¶

BedrockAgentCoreControl.Client.set_token_vault_cmk(**kwargs)¶

Sets the customer master key (CMK) for a token vault.

Request Syntax

response = client.set_token_vault_cmk(
    tokenVaultId='string',
    kmsConfiguration={
        'keyType': 'CustomerManagedKey'|'ServiceManagedKey',
        'kmsKeyArn': 'string'
    }
)

Parameters:

tokenVaultId (string) – The unique identifier of the token vault to update.
kmsConfiguration (dict) –
[REQUIRED]

The KMS configuration for the token vault, including the key type and KMS key ARN.
- keyType (string) – [REQUIRED]
  
  The type of KMS key (CustomerManagedKey or ServiceManagedKey).
- kmsKeyArn (string) –
  
  The Amazon Resource Name (ARN) of the KMS key.

Return type:

dict

Returns:

Response Syntax

{
    'tokenVaultId': 'string',
    'kmsConfiguration': {
        'keyType': 'CustomerManagedKey'|'ServiceManagedKey',
        'kmsKeyArn': 'string'
    },
    'lastModifiedDate': datetime(2015, 1, 1)
}

Response Structure

(dict) –
- tokenVaultId (string) –
  
  The ID of the token vault.
- kmsConfiguration (dict) –
  
  The KMS configuration for the token vault.
  - keyType (string) –
    
    The type of KMS key (CustomerManagedKey or ServiceManagedKey).
  - kmsKeyArn (string) –
    
    The Amazon Resource Name (ARN) of the KMS key.
- lastModifiedDate (datetime) –
  
  The timestamp when the token vault was last modified.

Exceptions

BedrockAgentCoreControl.Client.exceptions.UnauthorizedException
BedrockAgentCoreControl.Client.exceptions.ConcurrentModificationException
BedrockAgentCoreControl.Client.exceptions.ValidationException
BedrockAgentCoreControl.Client.exceptions.AccessDeniedException
BedrockAgentCoreControl.Client.exceptions.ResourceNotFoundException
BedrockAgentCoreControl.Client.exceptions.ThrottlingException
BedrockAgentCoreControl.Client.exceptions.InternalServerException