Manage API keys
Last updated
Last updated
An API key is a secure credential your application uses to call KMS. Unlike user accounts, API keys are scoped to specific operations, not tied to any individual person, and revocable at any time without affecting other keys or accounts.
After creation, the system shows your key’s full secret value once and only once. Click COPY icon before continuing.
IMPORTANT: Once you close this screen, the secret is gone forever. If you lose it, you must revoke the key and create a new one.
Click any key to open the detail panel. You can change: Key Name, IP Whitelist, Permissions, Description. You cannot change the Secret Key.
Revoke when a key is no longer needed or may be compromised. Revoked keys cannot be reactivated — create a new one if needed.
Click “Create API Key”
Fill in: Key Name (required), Permissions (required), IP Whitelist (optional — recommended for production), Description (optional)
Click Create
Permission
What it allows?
read
Read key details and metadata
create
Create new keys
update
Update key properties and state
rotate
Rotate key versions
encrypt
Encrypt data with keys
dencrypt
Decrypt data with keys
