Disabling a CMK

Function

This API allows you to disable a CMK. A disabled CMK cannot be used.

Note

Only an enabled CMK can be disabled.

URI

  • URI format

    POST /v1.0/{project_id}/kms/disable-key

  • Parameter description

    Table 1 Parameters

    Parameter

    Mandatory

    Type

    Description

    project_id

    Yes

    String

    Project ID

Requests

Table 2 Request parameters

Parameter

Mandatory

Type

Description

key_id

Yes

String

36-byte ID of a CMK that matches the regular expression ^[0-9a-z]{8}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{4}-[0-9a-z]{12}$

Example: 0d0466b0-e727-4d9c-b35d-f84bb474a37f

sequence

No

String

36-byte serial number of a request message

Example: 919c82d4-8046-4722-9094-35c3c6524cff

Responses

Table 3 Response parameters

Parameter

Mandatory

Type

Description

key_info

Yes

Array of objects

Information about keys. For details, see Table 4.

Table 4 key_info field description

Parameter

Mandatory

Type

Description

key_id

Yes

String

CMK ID

key_state

Yes

String

CMK status:

  • 2 indicates that the CMK is enabled.

  • 3 indicates that the CMK is disabled.

  • 4 indicates that the CMK is scheduled for deletion.

Examples

The following example describes how to disable a CMK whose ID is 0d0466b0-e727-4d9c-b35d-f84bb474a37f.

  • Example request

    {
        "key_id": "0d0466b0-e727-4d9c-b35d-f84bb474a37f"
    }
    
  • Example response

    {
        "key_info": {
            "key_id": "0d0466b0-e727-4d9c-b35d-f84bb474a37f",
            "key_state": "3"
        }
    }
    

    or

    {
        "error": {
            "error_code": "KMS.XXXX",
            "error_msg": "XXX"
        }
    }
    

Status Codes

Table 5 lists the normal status code returned by the response.

Table 5 Status codes

Status Code

Status

Description

200

OK

Request processed successfully.

Exception status code. For details, see Status Codes.