getKmsIssuer

Vercel v5.21.1, Oct 15 26

Viewing docs for Vercel v5.21.1
published on Thursday, Oct 15, 2026 by Pulumiverse

Schema (JSON)

pulumiverse/pulumi-vercel

Viewing docs for Vercel v5.21.1
published on Thursday, Oct 15, 2026 by Pulumiverse

Schema (JSON)

pulumiverse/pulumi-vercel

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as vercel from "@pulumiverse/vercel";

const example = vercel.getKmsIssuer({
    id: "iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx",
});

import pulumi
import pulumi_vercel as vercel

example = vercel.get_kms_issuer(id="iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx")

package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-vercel/sdk/v5/go/vercel"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := vercel.LookupKmsIssuer(ctx, &vercel.LookupKmsIssuerArgs{
			Id: "iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Vercel = Pulumiverse.Vercel;

return await Deployment.RunAsync(() => 
{
    var example = Vercel.GetKmsIssuer.Invoke(new()
    {
        Id = "iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.vercel.VercelFunctions;
import com.pulumi.vercel.inputs.GetKmsIssuerArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var example = VercelFunctions.getKmsIssuer(GetKmsIssuerArgs.builder()
            .id("iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx")
            .build());

    }
}

variables:
  example:
    fn::invoke:
      function: vercel:getKmsIssuer
      arguments:
        id: iss_xxxxxxxxxxxxxxxxxxxxxxxxxxxx

Example coming soon!

Using getKmsIssuer

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getKmsIssuer(args: GetKmsIssuerArgs, opts?: InvokeOptions): Promise<GetKmsIssuerResult>
function getKmsIssuerOutput(args: GetKmsIssuerOutputArgs, opts?: InvokeOutputOptions): Output<GetKmsIssuerResult>

def get_kms_issuer(id: Optional[str] = None,
                   team_id: Optional[str] = None,
                   opts: Optional[InvokeOptions] = None) -> GetKmsIssuerResult
def get_kms_issuer_output(id: pulumi.Input[Optional[str]] = None,
                   team_id: pulumi.Input[Optional[str]] = None,
                   opts: Optional[InvokeOutputOptions] = None) -> Output[GetKmsIssuerResult]

func LookupKmsIssuer(ctx *Context, args *LookupKmsIssuerArgs, opts ...InvokeOption) (*LookupKmsIssuerResult, error)
func LookupKmsIssuerOutput(ctx *Context, args *LookupKmsIssuerOutputArgs, opts ...InvokeOption) LookupKmsIssuerResultOutput

> Note: This function is named LookupKmsIssuer in the Go SDK.

public static class GetKmsIssuer 
{
    public static Task<GetKmsIssuerResult> InvokeAsync(GetKmsIssuerArgs args, InvokeOptions? opts = null)
    public static Output<GetKmsIssuerResult> Invoke(GetKmsIssuerInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetKmsIssuerResult> Invoke(GetKmsIssuerInvokeArgs args, InvokeOutputOptions opts)
}

public static CompletableFuture<GetKmsIssuerResult> getKmsIssuer(GetKmsIssuerArgs args, InvokeOptions options)
public static Output<GetKmsIssuerResult> getKmsIssuer(GetKmsIssuerArgs args, InvokeOptions options)
public static Output<GetKmsIssuerResult> getKmsIssuer(GetKmsIssuerArgs args, InvokeOutputOptions options)

fn::invoke:
  function: vercel:index/getKmsIssuer:getKmsIssuer
  arguments:
    # arguments dictionary

data "vercel_get_kms_issuer" "name" {
    # arguments
}

The following arguments are supported:

Id string: The ID of the issuer.
TeamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

Id string: The ID of the issuer.
TeamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

id string: The ID of the issuer.
team_id string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

id String: The ID of the issuer.
teamId String: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

id string: The ID of the issuer.
teamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

id str: The ID of the issuer.
team_id str: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

id String: The ID of the issuer.
teamId String: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.

getKmsIssuer Result

The following output properties are available:

Algorithm string: The signing algorithm used by the issuer.
CreatedAt string: The time the issuer was created.
Id string: The ID of the issuer.
ManagedBy string: Identifies the policy that manages this issuer, if any.
Name string: The name of the issuer.
Origin string: The origin of the issuer's key material, either vercel or external.
OwnerId string: The ID of the team that owns the issuer.
Policies List<Pulumiverse.Vercel.Outputs.GetKmsIssuerPolicy>: The authorization policies attached to the issuer.
SigningKeys List<Pulumiverse.Vercel.Outputs.GetKmsIssuerSigningKey>: The signing keys belonging to the issuer.
TeamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
UpdatedAt string: The time the issuer was last updated.

Algorithm string: The signing algorithm used by the issuer.
CreatedAt string: The time the issuer was created.
Id string: The ID of the issuer.
ManagedBy string: Identifies the policy that manages this issuer, if any.
Name string: The name of the issuer.
Origin string: The origin of the issuer's key material, either vercel or external.
OwnerId string: The ID of the team that owns the issuer.
Policies []GetKmsIssuerPolicy: The authorization policies attached to the issuer.
SigningKeys []GetKmsIssuerSigningKey: The signing keys belonging to the issuer.
TeamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
UpdatedAt string: The time the issuer was last updated.

algorithm string: The signing algorithm used by the issuer.
created_at string: The time the issuer was created.
id string: The ID of the issuer.
managed_by string: Identifies the policy that manages this issuer, if any.
name string: The name of the issuer.
origin string: The origin of the issuer's key material, either vercel or external.
owner_id string: The ID of the team that owns the issuer.
policies list(object): The authorization policies attached to the issuer.
signing_keys list(object): The signing keys belonging to the issuer.
team_id string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
updated_at string: The time the issuer was last updated.

algorithm String: The signing algorithm used by the issuer.
createdAt String: The time the issuer was created.
id String: The ID of the issuer.
managedBy String: Identifies the policy that manages this issuer, if any.
name String: The name of the issuer.
origin String: The origin of the issuer's key material, either vercel or external.
ownerId String: The ID of the team that owns the issuer.
policies List<GetKmsIssuerPolicy>: The authorization policies attached to the issuer.
signingKeys List<GetKmsIssuerSigningKey>: The signing keys belonging to the issuer.
teamId String: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
updatedAt String: The time the issuer was last updated.

algorithm string: The signing algorithm used by the issuer.
createdAt string: The time the issuer was created.
id string: The ID of the issuer.
managedBy string: Identifies the policy that manages this issuer, if any.
name string: The name of the issuer.
origin string: The origin of the issuer's key material, either vercel or external.
ownerId string: The ID of the team that owns the issuer.
policies GetKmsIssuerPolicy[]: The authorization policies attached to the issuer.
signingKeys GetKmsIssuerSigningKey[]: The signing keys belonging to the issuer.
teamId string: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
updatedAt string: The time the issuer was last updated.

algorithm str: The signing algorithm used by the issuer.
created_at str: The time the issuer was created.
id str: The ID of the issuer.
managed_by str: Identifies the policy that manages this issuer, if any.
name str: The name of the issuer.
origin str: The origin of the issuer's key material, either vercel or external.
owner_id str: The ID of the team that owns the issuer.
policies Sequence[GetKmsIssuerPolicy]: The authorization policies attached to the issuer.
signing_keys Sequence[GetKmsIssuerSigningKey]: The signing keys belonging to the issuer.
team_id str: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
updated_at str: The time the issuer was last updated.

algorithm String: The signing algorithm used by the issuer.
createdAt String: The time the issuer was created.
id String: The ID of the issuer.
managedBy String: Identifies the policy that manages this issuer, if any.
name String: The name of the issuer.
origin String: The origin of the issuer's key material, either vercel or external.
ownerId String: The ID of the team that owns the issuer.
policies List<Property Map>: The authorization policies attached to the issuer.
signingKeys List<Property Map>: The signing keys belonging to the issuer.
teamId String: The ID of the team the issuer exists under. Required when reading a team resource if a default team has not been set in the provider.
updatedAt String: The time the issuer was last updated.

Supporting Types

GetKmsIssuerPolicy

ClientId string: The client ID associated with the policy, for connex grants.
CreatedAt string: The time the policy was created.
Environments List<string>: The environments the policy applies to, for project grants.
Kind string: The policy kind, either project-grant or connex-grant.
ProjectId string: The project ID associated with the policy, for project grants.
TeamId string: The team ID associated with the policy, for project grants.
TokenClaims string: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
UpdatedAt string: The time the policy was last updated.

ClientId string: The client ID associated with the policy, for connex grants.
CreatedAt string: The time the policy was created.
Environments []string: The environments the policy applies to, for project grants.
Kind string: The policy kind, either project-grant or connex-grant.
ProjectId string: The project ID associated with the policy, for project grants.
TeamId string: The team ID associated with the policy, for project grants.
TokenClaims string: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
UpdatedAt string: The time the policy was last updated.

client_id string: The client ID associated with the policy, for connex grants.
created_at string: The time the policy was created.
environments list(string): The environments the policy applies to, for project grants.
kind string: The policy kind, either project-grant or connex-grant.
project_id string: The project ID associated with the policy, for project grants.
team_id string: The team ID associated with the policy, for project grants.
token_claims string: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
updated_at string: The time the policy was last updated.

clientId String: The client ID associated with the policy, for connex grants.
createdAt String: The time the policy was created.
environments List<String>: The environments the policy applies to, for project grants.
kind String: The policy kind, either project-grant or connex-grant.
projectId String: The project ID associated with the policy, for project grants.
teamId String: The team ID associated with the policy, for project grants.
tokenClaims String: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
updatedAt String: The time the policy was last updated.

clientId string: The client ID associated with the policy, for connex grants.
createdAt string: The time the policy was created.
environments string[]: The environments the policy applies to, for project grants.
kind string: The policy kind, either project-grant or connex-grant.
projectId string: The project ID associated with the policy, for project grants.
teamId string: The team ID associated with the policy, for project grants.
tokenClaims string: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
updatedAt string: The time the policy was last updated.

client_id str: The client ID associated with the policy, for connex grants.
created_at str: The time the policy was created.
environments Sequence[str]: The environments the policy applies to, for project grants.
kind str: The policy kind, either project-grant or connex-grant.
project_id str: The project ID associated with the policy, for project grants.
team_id str: The team ID associated with the policy, for project grants.
token_claims str: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
updated_at str: The time the policy was last updated.

clientId String: The client ID associated with the policy, for connex grants.
createdAt String: The time the policy was created.
environments List<String>: The environments the policy applies to, for project grants.
kind String: The policy kind, either project-grant or connex-grant.
projectId String: The project ID associated with the policy, for project grants.
teamId String: The team ID associated with the policy, for project grants.
tokenClaims String: The claims KMS includes in signed JWTs for this policy, as a JSON-encoded object.
updatedAt String: The time the policy was last updated.

GetKmsIssuerSigningKey

Algorithm string: The signing algorithm of the key.
CertificatePem string: The key's self-signed X.509 certificate in PEM form.
CreatedAt string: The time the key was created.
ImportKeyId string: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
IssuerId string: The ID of the issuer the key belongs to.
KeyId string: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
PublicKeyFingerprint string: The fingerprint of the public key.
PublicKeyJwk string: The public key as a JSON-encoded JWK.
PublicKeyPem string: The public key in SPKI PEM form.
RevokeAt string: The time at which the key is scheduled to be revoked, if any.
Status string: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
UpdatedAt string: The time the key was last updated.

Algorithm string: The signing algorithm of the key.
CertificatePem string: The key's self-signed X.509 certificate in PEM form.
CreatedAt string: The time the key was created.
ImportKeyId string: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
IssuerId string: The ID of the issuer the key belongs to.
KeyId string: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
PublicKeyFingerprint string: The fingerprint of the public key.
PublicKeyJwk string: The public key as a JSON-encoded JWK.
PublicKeyPem string: The public key in SPKI PEM form.
RevokeAt string: The time at which the key is scheduled to be revoked, if any.
Status string: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
UpdatedAt string: The time the key was last updated.

algorithm string: The signing algorithm of the key.
certificate_pem string: The key's self-signed X.509 certificate in PEM form.
created_at string: The time the key was created.
import_key_id string: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
issuer_id string: The ID of the issuer the key belongs to.
key_id string: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
public_key_fingerprint string: The fingerprint of the public key.
public_key_jwk string: The public key as a JSON-encoded JWK.
public_key_pem string: The public key in SPKI PEM form.
revoke_at string: The time at which the key is scheduled to be revoked, if any.
status string: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
updated_at string: The time the key was last updated.

algorithm String: The signing algorithm of the key.
certificatePem String: The key's self-signed X.509 certificate in PEM form.
createdAt String: The time the key was created.
importKeyId String: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
issuerId String: The ID of the issuer the key belongs to.
keyId String: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
publicKeyFingerprint String: The fingerprint of the public key.
publicKeyJwk String: The public key as a JSON-encoded JWK.
publicKeyPem String: The public key in SPKI PEM form.
revokeAt String: The time at which the key is scheduled to be revoked, if any.
status String: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
updatedAt String: The time the key was last updated.

algorithm string: The signing algorithm of the key.
certificatePem string: The key's self-signed X.509 certificate in PEM form.
createdAt string: The time the key was created.
importKeyId string: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
issuerId string: The ID of the issuer the key belongs to.
keyId string: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
publicKeyFingerprint string: The fingerprint of the public key.
publicKeyJwk string: The public key as a JSON-encoded JWK.
publicKeyPem string: The public key in SPKI PEM form.
revokeAt string: The time at which the key is scheduled to be revoked, if any.
status string: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
updatedAt string: The time the key was last updated.

algorithm str: The signing algorithm of the key.
certificate_pem str: The key's self-signed X.509 certificate in PEM form.
created_at str: The time the key was created.
import_key_id str: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
issuer_id str: The ID of the issuer the key belongs to.
key_id str: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
public_key_fingerprint str: The fingerprint of the public key.
public_key_jwk str: The public key as a JSON-encoded JWK.
public_key_pem str: The public key in SPKI PEM form.
revoke_at str: The time at which the key is scheduled to be revoked, if any.
status str: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
updated_at str: The time the key was last updated.

algorithm String: The signing algorithm of the key.
certificatePem String: The key's self-signed X.509 certificate in PEM form.
createdAt String: The time the key was created.
importKeyId String: The caller-supplied key ID (kid) for an imported key, or null for keys generated by Vercel. This is the value that appears in the JWKS and signed-token headers for imported keys.
issuerId String: The ID of the issuer the key belongs to.
keyId String: The server-minted addressable ID of the signing key. For keys generated by Vercel this is also the JWT/JWKS kid; for an imported key the kid may differ from this addressable ID.
publicKeyFingerprint String: The fingerprint of the public key.
publicKeyJwk String: The public key as a JSON-encoded JWK.
publicKeyPem String: The public key in SPKI PEM form.
revokeAt String: The time at which the key is scheduled to be revoked, if any.
status String: The status of the key, one of pending, active, or revoking. A newly rotated key is pending until its public key propagates, then becomes active.
updatedAt String: The time the key was last updated.

Package Details

Repository: vercel pulumiverse/pulumi-vercel
License: Apache-2.0
Notes: This Pulumi package is based on the vercel Terraform Provider.

Viewing docs for Vercel v5.21.1
published on Thursday, Oct 15, 2026 by Pulumiverse

Schema (JSON)

pulumiverse/pulumi-vercel

vercel.getKmsIssuer

On this page

On this page

Example Usage

Using getKmsIssuer

getKmsIssuer Result

Supporting Types

GetKmsIssuerPolicy

GetKmsIssuerSigningKey

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

vercel.getKmsIssuer

On this page

On this page

Example Usage

Using getKmsIssuer

getKmsIssuer Result

Supporting Types

GetKmsIssuerPolicy

GetKmsIssuerSigningKey

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.