You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/index.md
+16-40Lines changed: 16 additions & 40 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -19,7 +19,7 @@ The usage of DSM Terraform Provider assumes the following is pre-configured in o
19
19
* Trial / Test environment maybe provisioned via [amer.smartkey.io](https://amer.smartkey.io)
20
20
* Production / Test account or tenant has already been provisioned within Fortanix DSM.
21
21
22
-
### Authentication and Configuraion.
22
+
### Authentication and Configuration
23
23
24
24
***Note**: One of the following Authentication methods needs to be available during the DSM Terraform Provider initial setup.
25
25
@@ -112,44 +112,6 @@ provider "dsm" {
112
112
}
113
113
```
114
114
115
-
### _(Optional) AWS Setup / Permissions_
116
-
117
-
To COPY local DSM keys to AWS KMS for Bring-Your-Own-Key (BYOK), appropriate permissions must be set. At a minimum, the following permissions must be set at a User or the Role to assume into:
118
-
119
-
```
120
-
"Action": [
121
-
"kms:CancelKeyDeletion",
122
-
"kms:CreateAlias",
123
-
"kms:CreateGrant",
124
-
"kms:CreateKey",
125
-
"kms:DeleteAlias",
126
-
"kms:DeleteImportedKeyMaterial",
127
-
"kms:Describe*",
128
-
"kms:DisableKey",
129
-
"kms:DisableKeyRotation",
130
-
"kms:EnableKey",
131
-
"kms:EnableKeyRotation",
132
-
"kms:GenerateDataKey",
133
-
"kms:GenerateDataKeyPair",
134
-
"kms:GenerateDataKeyPairWithoutPlaintext",
135
-
"kms:GenerateDataKeyWithoutPlaintext",
136
-
"kms:GenerateRandom",
137
-
"kms:Get*",
138
-
"kms:ImportKeyMaterial"
139
-
"kms:List*",
140
-
"kms:PutKeyPolicy",
141
-
"kms:RetireGrant",
142
-
"kms:RevokeGrant",
143
-
"kms:ScheduleKeyDeletion",
144
-
"kms:Sign",
145
-
"kms:TagResource",
146
-
"kms:UntagResource",
147
-
"kms:UpdateAlias",
148
-
"kms:Verify"
149
-
]
150
-
```
151
-
152
-
153
115
## Schema
154
116
155
117
### Required
@@ -172,4 +134,18 @@ To COPY local DSM keys to AWS KMS for Bring-Your-Own-Key (BYOK), appropriate per
172
134
173
135
1. username, password and acct_id
174
136
2. username, password, acct_id and ldap_name
175
-
3. api_key
137
+
3. api_key
138
+
139
+
### BYOK setup / permissions
140
+
141
+
Please refer the below links for BYOK setup/permissions.
-**Required**: This attribute must be provided by the user in the Terraform configuration. If it is not specified, Terraform will return an error during the plan or apply phases.
150
+
-**Optional**: This attribute is not mandatory. If it is not provided by the user, Terraform will use a default value (if any). Users can specify it to override the default behavior.
151
+
-**Read-Only**: This attribute is output-only and cannot be set by the user. It provides information that is determined by the provider or the state of the resource after it has been created or updated. Also known as a "computed" attribute.
0 commit comments