AWS Security ChangesHomeSearch

AWS kms documentation change

Service: kms · 2026-05-22 · Documentation low

File: kms/latest/developerguide/symm-asymm-compare.md

Summary

Removed alt text descriptions from all icon images in the API operation comparison table. The table content and functionality remain unchanged.

Security assessment

The change only removes accessibility-focused alt text from decorative icons without modifying any security-related content, configurations, or recommendations. There is no evidence of security vulnerability fixes, incident responses, or new security feature documentation.

Diff

diff --git a/kms/latest/developerguide/symm-asymm-compare.md b/kms/latest/developerguide/symm-asymm-compare.md
index 2e064d5a8..70cbbee89 100644
--- a//kms/latest/developerguide/symm-asymm-compare.md
+++ b//kms/latest/developerguide/symm-asymm-compare.md
@@ -115,45 +115,45 @@ AWS KMS API operation | Multi-Region keys | Imported key material | KMS keys in
-[CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) You can use `CreateKey` to create a multi-Region primary key, a KMS key with imported key material, or a KMS key in a custom key store. To create a multi-Region replica key, use `ReplicateKey`. | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `KEY_AGREEMENT`) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `KEY_AGREEMENT`) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with AWS KMS key material (`Origin` is `AWS_KMS`). | ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with AWS KMS key material (`Origin` is `AWS_KMS`). | ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Valid only on HMAC KMS keys |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` will always be `false`.) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`). | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) Valid only for [asymmetric KMS keys](./symmetric-asymmetric.html). |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`). | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with `AWS_KMS` or `EXTERNAL` origin. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region primary keys. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region primary keys. |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with `AWS_KMS` or `EXTERNAL` origin. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys. |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) Valid only on when `KeyUsage` is `SIGN_VERIFY`. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) \- The current KMS key and the new KMS key must be the same type (both symmetric or both asymmetric or both HMAC) and they must have the same [key usage](./create-keys.html#key-usage). | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
-[UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region keys. |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[Verify](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) Valid only when `KeyUsage` is `SIGN_VERIFY`. |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) |  ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
-[VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Valid only on HMAC KMS keys |  ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png) | ![Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.](/images/kms/latest/developerguide/images/icon-failed.png)  
+[CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) You can use `CreateKey` to create a multi-Region primary key, a KMS key with imported key material, or a KMS key in a custom key store. To create a multi-Region replica key, use `ReplicateKey`. | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `KEY_AGREEMENT`) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `KEY_AGREEMENT`) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with AWS KMS key material (`Origin` is `AWS_KMS`). | ![](/images/kms/latest/developerguide/images/icon-failed.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with AWS KMS key material (`Origin` is `AWS_KMS`). | ![](/images/kms/latest/developerguide/images/icon-failed.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption KMS keys | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Valid only on HMAC KMS keys |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` will always be `false`.) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`). | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) Valid only for [asymmetric KMS keys](./symmetric-asymmetric.html). |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only for keys with imported key material (`Origin` is `EXTERNAL`). | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with `AWS_KMS` or `EXTERNAL` origin. |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys. |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only when `KeyUsage` is `ENCRYPT_DECRYPT` | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region primary keys. |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region primary keys. |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys with `AWS_KMS` or `EXTERNAL` origin. |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on symmetric encryption keys. |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) Valid only on when `KeyUsage` is `SIGN_VERIFY`. |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) \- The current KMS key and the new KMS key must be the same type (both symmetric or both asymmetric or both HMAC) and they must have the same [key usage](./create-keys.html#key-usage). | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png)  
+[UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-successful.png) Valid only on multi-Region keys. |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[Verify](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) Valid only when `KeyUsage` is `SIGN_VERIFY`. |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) |  ![](/images/kms/latest/developerguide/images/icon-failed.png)  
+[VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Valid only on HMAC KMS keys |  ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-successful.png) | ![](/images/kms/latest/developerguide/images/icon-failed.png)