Skip to content

Commit 253ce6d

Browse files
Merge pull request #104 from fortanix/index_changes_5_32
Add the links of BYOK and removed AWS cloud permissions.
2 parents f04eff0 + 56c5e23 commit 253ce6d

File tree

1 file changed

+16
-40
lines changed

1 file changed

+16
-40
lines changed

docs/index.md

Lines changed: 16 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ The usage of DSM Terraform Provider assumes the following is pre-configured in o
1919
* Trial / Test environment maybe provisioned via [amer.smartkey.io](https://amer.smartkey.io)
2020
* Production / Test account or tenant has already been provisioned within Fortanix DSM.
2121

22-
### Authentication and Configuraion.
22+
### Authentication and Configuration
2323

2424
* **Note**: One of the following Authentication methods needs to be available during the DSM Terraform Provider initial setup.
2525

@@ -112,44 +112,6 @@ provider "dsm" {
112112
}
113113
```
114114

115-
### _(Optional) AWS Setup / Permissions_
116-
117-
To COPY local DSM keys to AWS KMS for Bring-Your-Own-Key (BYOK), appropriate permissions must be set. At a minimum, the following permissions must be set at a User or the Role to assume into:
118-
119-
```
120-
"Action": [
121-
"kms:CancelKeyDeletion",
122-
"kms:CreateAlias",
123-
"kms:CreateGrant",
124-
"kms:CreateKey",
125-
"kms:DeleteAlias",
126-
"kms:DeleteImportedKeyMaterial",
127-
"kms:Describe*",
128-
"kms:DisableKey",
129-
"kms:DisableKeyRotation",
130-
"kms:EnableKey",
131-
"kms:EnableKeyRotation",
132-
"kms:GenerateDataKey",
133-
"kms:GenerateDataKeyPair",
134-
"kms:GenerateDataKeyPairWithoutPlaintext",
135-
"kms:GenerateDataKeyWithoutPlaintext",
136-
"kms:GenerateRandom",
137-
"kms:Get*",
138-
"kms:ImportKeyMaterial"
139-
"kms:List*",
140-
"kms:PutKeyPolicy",
141-
"kms:RetireGrant",
142-
"kms:RevokeGrant",
143-
"kms:ScheduleKeyDeletion",
144-
"kms:Sign",
145-
"kms:TagResource",
146-
"kms:UntagResource",
147-
"kms:UpdateAlias",
148-
"kms:Verify"
149-
]
150-
```
151-
152-
153115
## Schema
154116

155117
### Required
@@ -172,4 +134,18 @@ To COPY local DSM keys to AWS KMS for Bring-Your-Own-Key (BYOK), appropriate per
172134

173135
1. username, password and acct_id
174136
2. username, password, acct_id and ldap_name
175-
3. api_key
137+
3. api_key
138+
139+
### BYOK setup / permissions
140+
141+
Please refer the below links for BYOK setup/permissions.
142+
143+
- [AWS](https://support.fortanix.com/hc/en-us/articles/360055605471-Fortanix-DSM-AWS-Key-Management-Service-CDC-Group-Setup)
144+
- [Azure](https://support.fortanix.com/hc/en-us/articles/4404920424468-Fortanix-DSM-Azure-Key-Vault-CDC-Group-Setup)
145+
- [GCP](https://support.fortanix.com/hc/en-us/articles/4423384427796-User-s-Guide-Google-Cloud-KMS)
146+
147+
### Attributes usage definitions
148+
149+
- **Required**: This attribute must be provided by the user in the Terraform configuration. If it is not specified, Terraform will return an error during the plan or apply phases.
150+
- **Optional**: This attribute is not mandatory. If it is not provided by the user, Terraform will use a default value (if any). Users can specify it to override the default behavior.
151+
- **Read-Only**: This attribute is output-only and cannot be set by the user. It provides information that is determined by the provider or the state of the resource after it has been created or updated. Also known as a "computed" attribute.

0 commit comments

Comments
 (0)