1. Packages
  2. stackit
  3. API Docs
  4. getKmsWrappingKey
Viewing docs for stackit v0.0.4
published on Friday, Feb 20, 2026 by stackitcloud
Schema (JSON)
stackitcloud/pulumi-stackit

stackit.getKmsWrappingKey

stackit logo
Viewing docs for stackit v0.0.4
published on Friday, Feb 20, 2026 by stackitcloud
Schema (JSON)
stackitcloud/pulumi-stackit

    KMS wrapping key datasource schema.

    Example Usage

    data "stackit_kms_wrapping_key" "example" {
  project_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  keyring_id      = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
  wrapping_key_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
}

    Using getKmsWrappingKey

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getKmsWrappingKey(args: GetKmsWrappingKeyArgs, opts?: InvokeOptions): Promise<GetKmsWrappingKeyResult>
function getKmsWrappingKeyOutput(args: GetKmsWrappingKeyOutputArgs, opts?: InvokeOptions): Output<GetKmsWrappingKeyResult>
    def get_kms_wrapping_key(keyring_id: Optional[str] = None,
                         project_id: Optional[str] = None,
                         region: Optional[str] = None,
                         wrapping_key_id: Optional[str] = None,
                         opts: Optional[InvokeOptions] = None) -> GetKmsWrappingKeyResult
def get_kms_wrapping_key_output(keyring_id: Optional[pulumi.Input[str]] = None,
                         project_id: Optional[pulumi.Input[str]] = None,
                         region: Optional[pulumi.Input[str]] = None,
                         wrapping_key_id: Optional[pulumi.Input[str]] = None,
                         opts: Optional[InvokeOptions] = None) -> Output[GetKmsWrappingKeyResult]
    func LookupKmsWrappingKey(ctx *Context, args *LookupKmsWrappingKeyArgs, opts ...InvokeOption) (*LookupKmsWrappingKeyResult, error)
func LookupKmsWrappingKeyOutput(ctx *Context, args *LookupKmsWrappingKeyOutputArgs, opts ...InvokeOption) LookupKmsWrappingKeyResultOutput

    > Note: This function is named LookupKmsWrappingKey in the Go SDK.

    public static class GetKmsWrappingKey 
{
    public static Task<GetKmsWrappingKeyResult> InvokeAsync(GetKmsWrappingKeyArgs args, InvokeOptions? opts = null)
    public static Output<GetKmsWrappingKeyResult> Invoke(GetKmsWrappingKeyInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetKmsWrappingKeyResult> getKmsWrappingKey(GetKmsWrappingKeyArgs args, InvokeOptions options)
public static Output<GetKmsWrappingKeyResult> getKmsWrappingKey(GetKmsWrappingKeyArgs args, InvokeOptions options)

    fn::invoke:
  function: stackit:index/getKmsWrappingKey:getKmsWrappingKey
  arguments:
    # arguments dictionary

    The following arguments are supported:

    KeyringId string
    The ID of the associated keyring
    ProjectId string
    STACKIT project ID to which the keyring is associated.
    WrappingKeyId string
    The ID of the wrapping key
    Region string
    The resource region. If not defined, the provider region is used.
    KeyringId string
    The ID of the associated keyring
    ProjectId string
    STACKIT project ID to which the keyring is associated.
    WrappingKeyId string
    The ID of the wrapping key
    Region string
    The resource region. If not defined, the provider region is used.
    keyringId String
    The ID of the associated keyring
    projectId String
    STACKIT project ID to which the keyring is associated.
    wrappingKeyId String
    The ID of the wrapping key
    region String
    The resource region. If not defined, the provider region is used.
    keyringId string
    The ID of the associated keyring
    projectId string
    STACKIT project ID to which the keyring is associated.
    wrappingKeyId string
    The ID of the wrapping key
    region string
    The resource region. If not defined, the provider region is used.
    keyring_id str
    The ID of the associated keyring
    project_id str
    STACKIT project ID to which the keyring is associated.
    wrapping_key_id str
    The ID of the wrapping key
    region str
    The resource region. If not defined, the provider region is used.
    keyringId String
    The ID of the associated keyring
    projectId String
    STACKIT project ID to which the keyring is associated.
    wrappingKeyId String
    The ID of the wrapping key
    region String
    The resource region. If not defined, the provider region is used.

    getKmsWrappingKey Result

    The following output properties are available:

    AccessScope string
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    Algorithm string
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    CreatedAt string
    The date and time the creation of the wrapping key was triggered.
    Description string
    A user chosen description to distinguish multiple wrapping keys.
    DisplayName string
    The display name to distinguish multiple wrapping keys.
    ExpiresAt string
    The date and time the wrapping key will expire.
    Id string
    KeyringId string
    The ID of the associated keyring
    ProjectId string
    STACKIT project ID to which the keyring is associated.
    Protection string
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    PublicKey string
    The public key of the wrapping key.
    Purpose string
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    Region string
    The resource region. If not defined, the provider region is used.
    WrappingKeyId string
    The ID of the wrapping key
    AccessScope string
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    Algorithm string
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    CreatedAt string
    The date and time the creation of the wrapping key was triggered.
    Description string
    A user chosen description to distinguish multiple wrapping keys.
    DisplayName string
    The display name to distinguish multiple wrapping keys.
    ExpiresAt string
    The date and time the wrapping key will expire.
    Id string
    KeyringId string
    The ID of the associated keyring
    ProjectId string
    STACKIT project ID to which the keyring is associated.
    Protection string
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    PublicKey string
    The public key of the wrapping key.
    Purpose string
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    Region string
    The resource region. If not defined, the provider region is used.
    WrappingKeyId string
    The ID of the wrapping key
    accessScope String
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    algorithm String
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    createdAt String
    The date and time the creation of the wrapping key was triggered.
    description String
    A user chosen description to distinguish multiple wrapping keys.
    displayName String
    The display name to distinguish multiple wrapping keys.
    expiresAt String
    The date and time the wrapping key will expire.
    id String
    keyringId String
    The ID of the associated keyring
    projectId String
    STACKIT project ID to which the keyring is associated.
    protection String
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    publicKey String
    The public key of the wrapping key.
    purpose String
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    region String
    The resource region. If not defined, the provider region is used.
    wrappingKeyId String
    The ID of the wrapping key
    accessScope string
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    algorithm string
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    createdAt string
    The date and time the creation of the wrapping key was triggered.
    description string
    A user chosen description to distinguish multiple wrapping keys.
    displayName string
    The display name to distinguish multiple wrapping keys.
    expiresAt string
    The date and time the wrapping key will expire.
    id string
    keyringId string
    The ID of the associated keyring
    projectId string
    STACKIT project ID to which the keyring is associated.
    protection string
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    publicKey string
    The public key of the wrapping key.
    purpose string
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    region string
    The resource region. If not defined, the provider region is used.
    wrappingKeyId string
    The ID of the wrapping key
    access_scope str
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    algorithm str
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    created_at str
    The date and time the creation of the wrapping key was triggered.
    description str
    A user chosen description to distinguish multiple wrapping keys.
    display_name str
    The display name to distinguish multiple wrapping keys.
    expires_at str
    The date and time the wrapping key will expire.
    id str
    keyring_id str
    The ID of the associated keyring
    project_id str
    STACKIT project ID to which the keyring is associated.
    protection str
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    public_key str
    The public key of the wrapping key.
    purpose str
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    region str
    The resource region. If not defined, the provider region is used.
    wrapping_key_id str
    The ID of the wrapping key
    accessScope String
    The access scope of the key. Default is PUBLIC. Possible values are: PUBLIC, SNA.
    algorithm String
    The wrapping algorithm used to wrap the key to import. Possible values are: rsa_2048_oaep_sha256, rsa_3072_oaep_sha256, rsa_4096_oaep_sha256, rsa_4096_oaep_sha512, rsa_2048_oaep_sha256_aes_256_key_wrap, rsa_3072_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha256_aes_256_key_wrap, rsa_4096_oaep_sha512_aes_256_key_wrap.
    createdAt String
    The date and time the creation of the wrapping key was triggered.
    description String
    A user chosen description to distinguish multiple wrapping keys.
    displayName String
    The display name to distinguish multiple wrapping keys.
    expiresAt String
    The date and time the wrapping key will expire.
    id String
    keyringId String
    The ID of the associated keyring
    projectId String
    STACKIT project ID to which the keyring is associated.
    protection String
    The underlying system that is responsible for protecting the key material. Possible values are: software.
    publicKey String
    The public key of the wrapping key.
    purpose String
    The purpose for which the key will be used. Possible values are: wrap_symmetric_key, wrap_asymmetric_key.
    region String
    The resource region. If not defined, the provider region is used.
    wrappingKeyId String
    The ID of the wrapping key

    Package Details

    Repository
    stackit stackitcloud/pulumi-stackit
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the stackit Terraform Provider.
    stackit logo
    Viewing docs for stackit v0.0.4
    published on Friday, Feb 20, 2026 by stackitcloud
    Schema (JSON)
    stackitcloud/pulumi-stackit
      Try Pulumi Cloud free. Your team will thank you.