KeyPurpose

Open Beta Documentation Amazon offers this technical documentation as part of a pre-release, open beta. The features described might change as Amazon receives feedback and iterates on the features. For the most current feature information, see the Release Notes.

Represents the various purposes or operations for which a cryptographic key can be used. Each enum value corresponds to a specific cryptographic operation or function.

Enumeration Members

DECRYPT

DECRYPT: "DECRYPT"

A key that can be used for decryption operations. This is typically associated with private keys in asymmetric encryption or shared keys in symmetric encryption.

DERIVE

DERIVE: "DERIVE"

A key that can be used in key derivation functions. These functions derive one or more secret keys from a secret value such as a master key, password, or shared secret.

ENCRYPT

ENCRYPT: "ENCRYPT"

A key that can be used for encryption operations. This could be a public key in asymmetric encryption or a shared key in symmetric encryption.

SIGN

SIGN: "SIGN"

A key that can be used for creating digital signatures. This is typically associated with private keys in asymmetric cryptography.

UNWRAP

UNWRAP: "UNWRAP"

A key that can be used for unwrapping (decrypting) wrapped keys. This is the reverse operation of key wrapping, used to recover the original key material.

VERIFY

VERIFY: "VERIFY"

A key that can be used for verifying digital signatures. This is typically associated with public keys corresponding to the private keys used for signing.

WRAP

WRAP: "WRAP"

A key that can be used for wrapping (encrypting) other keys. Key wrapping is a method of securing cryptographic key material during transmission or storage.

Last updated: Sep 30, 2025