key.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 创建KMS密钥与别名，支持加密/解密，设定默认有效期与别名名称。
  en: Create KMS keys with aliases, enabling encryption/decryption functionality,
    and set default validity periods along with alias names.
Parameters:
  KeyUsage:
    Type: String
    Default: ENCRYPT/DECRYPT
    AllowedValues:
    - ENCRYPT/DECRYPT
    - SIGN/VERIFY
  PendingWindowInDays:
    Type: Number
    Default: 7
    MinValue: 7
    MaxValue: 30
  AliasName:
    Type: String
    Default: mytest
Resources:
  Key:
    Type: ALIYUN::KMS::Key
    Properties:
      KeyUsage:
        Ref: KeyUsage
      Enable: false
      PendingWindowInDays:
        Ref: PendingWindowInDays
      Description: Test create key
  Alias:
    Type: ALIYUN::KMS::Alias
    Properties:
      KeyId:
        Fn::GetAtt:
        - Key
        - KeyId
      AliasName:
        Fn::Sub: alias/${AliasName}
Outputs:
  KeyId:
    Value:
      Fn::GetAtt:
      - Key
      - KeyId