Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.

# Referencia de tipos de claves
<a name="symm-asymm-compare"></a>

AWS KMS admite diferentes funciones para diferentes *tipos* de claves KMS. Por ejemplo, solo puede utilizar las [claves de KMS de cifrado simétricas](symm-asymm-choose-key-spec.md#symmetric-cmks) para [generar claves de datos simétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) y [pares de claves de datos asimétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairs.html). Además, la [importación del material de claves](importing-keys.md) y la [rotación automática de claves](rotate-keys.md) son compatibles únicamente con las claves de KMS de cifrado simétricas. Asimismo, solo puede crear claves de KMS de cifrado simétricas en un [almacén de claves personalizadas](key-store-overview.md#custom-key-store-overview). 

Esta referencia incluye dos tablas. 
+ La [tabla de tipos de clave](#key-type-table) muestra las AWS KMS operaciones que son válidas para las claves KMS de cifrado simétrico, las claves KMS asimétricas y las claves KMS HMAC. 
+ La [tabla de características especiales](#special-features-table) muestra las operaciones de AWS KMS que son válidas para las claves de KMS para varias regiones, las claves de KMS con material de claves importado y las claves de KMS de almacenes de claves personalizados.

## Tabla de tipos de claves
<a name="key-type-table"></a>

Es posible que tenga que desplazarse horizontal o verticalmente para ver todos los datos de esta tabla.


| AWS KMS Funcionamiento de la API | Claves de KMS de cifrado simétrico | Claves KMS HMAC | Claves de KMS asimétricas (ENCRYPT\_DECRYPT) | Claves de KMS asimétricas (SIGN\_VERIFY) | Claves KMS asimétricas (KEY\_AGREEMENT) | 
| --- | --- | --- | --- | --- | --- | 
| [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) | Sí | Sí | Sí | Sí | Sí | 
| [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | Sí | Sí | Sí | Sí | Sí | 
| [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) | Sí | Sí | Sí | Sí | Sí | 
| [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) | Sí | Sí | Sí | Sí | Sí | 
| [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) | Sí | No | Sí | No | No | 
| [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) | Sí | Sí | Sí | Sí | Sí | 
| [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html)<br />Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`). | Sí | Sí | Sí | Sí | Sí | 
| [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) | No | No | No | No | Sí | 
| [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) | Sí | Sí | Sí | Sí | Sí | 
| [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) | Sí | Sí | Sí | Sí | Sí | 
| [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) |  Sí Válido solo en claves de KMS con material (`Origin`es`AWS_KMS`) AWS KMS clave. | No | No | No | No | 
| [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) | Sí | Sí | Sí | Sí | Sí | 
| [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) | Sí<br />Válido solo en claves KMS con material (`Origin`es`AWS_KMS`) AWS KMS clave. | No | No | No | No | 
| [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) | Sí | No | Sí | No | No | 
| [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) | Sí  | No | No | No | No | 
| [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html)<br />Genera un par de claves de datos asimétricos protegido por una clave de KMS de cifrado simétrica. | Sí No es válido en claves de KMS en almacenes de claves personalizados. | No | No | No | No | 
| [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html)<br />Genera un par de claves de datos asimétricos protegido por una clave de KMS de cifrado simétrica. | Sí <br />No es válido en claves de KMS en almacenes de claves personalizados. | No | No | No | No | 
| [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) | Sí | No | No | No | No | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) | No | Sí | No | No | No | 
| [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) | Sí | Sí | Sí | Sí | Sí | 
| [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) | Sí |  Sí (`KeyRotationEnabled` siempre será `false`.) |  Sí (`KeyRotationEnabled` siempre será `false`.) |  Sí (`KeyRotationEnabled` siempre será `false`.) |  Sí (`KeyRotationEnabled` siempre será `false`.) | 
| [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html)<br />Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`). | Sí | Sí | Sí | Sí | Sí | 
| [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) | No | No | Sí | Sí | Sí | 
| [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html)<br />Válido solo en las claves de KMS con material de claves importado (`Origin` es `EXTERNAL`). | Sí | Sí | Sí | Sí | Sí | 
| [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) | Sí | Sí | Sí | Sí | Sí | 
| [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) | Sí | Sí | Sí | Sí | Sí | 
| [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) | Sí | Sí | Sí | Sí | Sí | 
| [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) | Sí | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | Sí (El campo `Rotations` siempre será nulo o estará vacío). | 
| [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) | Sí | Sí | Sí | Sí | Sí | 
| [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) | Sí | Sí | Sí | Sí | Sí | 
| [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) | Sí | Sí | Sí | Sí | Sí | 
| [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) | Sí | No | Sí | No | No | 
| [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html)<br />- Válido solo en claves de varias regiones | Sí | Sí | Sí | Sí | Sí | 
| [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) | Sí | Sí | Sí | Sí | Sí | 
| [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) | Sí | Sí | Sí | Sí | Sí | 
| [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) | Sí Válido solo en claves KMS de cifrado simétrico administradas por el cliente con origen `AWS_KMS` o `EXTERNAL`. | No | No | No | No | 
| [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) | Sí | Sí | Sí | Sí | Sí | 
| [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) | No | No | No | Sí | No | 
| [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) | Sí | Sí | Sí | Sí | Sí | 
| [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) | Sí | Sí | Sí | Sí | Sí | 
| [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html)<br />La clave de KMS actual y la nueva clave de KMS deben ser del mismo tipo (ambas simétricas o ambas asimétricas o ambas HMAC) y deben tener el mismo [uso de clave](create-keys.md#key-usage). | Sí | Sí | Sí | Sí | Sí | 
| [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) | Sí | Sí | Sí | Sí | Sí | 
| [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html)<br />- Válido solo en claves de varias regiones | Sí | Sí | Sí | Sí | Sí | 
| [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) | No | No | No | Sí | No | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) | No | Sí | No | No | No | 

## Tabla de características especiales
<a name="special-features-table"></a>

En esta tabla se muestran las operaciones de AWS KMS API que se admiten en cada tipo de clave de *uso especial*. 

Al leer esta tabla, debe tener en cuenta las siguientes interacciones:
+ [Claves de varias regiones](multi-region-keys-overview.md): 
  + Las claves de varias regiones pueden ser claves de KMS de cifrado simétrico, claves de KMS asimétricas, claves de KMS HMAC y claves de KMS con material de claves importado.
  + No puede crear claves de varias regiones en un almacén de claves personalizado.
+ [Material de claves importado](importing-keys.md)
  + Puede importar material de claves de KMS de cifrado simétrico, claves de KMS asimétricas y claves HMAC de KMS.
  + Puede crear [claves de varias regiones con material de claves importado](multi-region-keys-overview.md).
  + No puede crear claves con material de claves importado en un almacén de claves personalizado. 
  + La rotación automática de claves `EnableKeyRotation`, `DisableKeyRotation`) no es compatible con las claves KMS con el material de claves importado.
  + La rotación de claves bajo demanda (`RotateKeyOnDemand`) se admite para las claves KMS de cifrado simétrico con material de clave importado.
+ [Almacenes de claves personalizados](key-store-overview.md#custom-key-store-overview)
  + Los almacenes de claves personalizados solo admiten claves KMS de cifrado simétricas.
  + Las operaciones simétricas en pares de claves asimétricas (`GenerateDataKeyPair`, `GenerateDataKeyPairWithoutPlaintext`) no se admiten en las claves de KMS de los almacenes de claves personalizados.
  + Las claves KMS de almacenes de claves personalizados no admiten la rotación automática de claves (`EnableKeyRotation`, `DisableKeyRotation`).
  + No puede crear claves de varias regiones en almacenes de claves personalizados.

Es posible que tenga que desplazarse horizontal o verticalmente para ver todos los datos de esta tabla.


| AWS KMS Funcionamiento de la API | Claves de varias regiones | Material de claves importado | Las claves KMS en un almacén de claves personalizado | 
| --- | --- | --- | --- | 
| [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html)Puede utilizar `CreateKey` para crear una clave principal de varias regiones, una clave de KMS con material de claves importado o una clave de KMS en un almacén de claves personalizado. Para crear una clave de réplica de varias regiones, utilice `ReplicateKey`. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) <br />Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT` | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo cuando `KeyUsage` es `KEY_AGREEMENT`) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo cuando `KeyUsage` es `KEY_AGREEMENT`) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)Válido solo en claves de cifrado simétricas con material (`Origin`es`AWS_KMS`) AWS KMS clave. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo con claves de cifrado de KMS simétricas | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves de cifrado simétricas con material (`Origin`es`AWS_KMS`) de AWS KMS clave. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT` | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) <br />Válido solo con claves de cifrado de KMS simétricas | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo con claves de cifrado de KMS simétricas | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo con claves de cifrado de KMS simétricas | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo con claves de cifrado de KMS simétricas | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Válido solo en claves HMAC de KMS |  ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)(`KeyRotationEnabled` siempre será `false`.) |  ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png)  | 
| [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`). | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html)<br />Válido solo para [claves de KMS asimétricas](symmetric-asymmetric.md). | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo para claves con material de claves importado (`Origin` es `EXTERNAL`). | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves de cifrado simétricas con origen `AWS_KMS` u `EXTERNAL` origen. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves de cifrado simétricas. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo cuando `KeyUsage` es `ENCRYPT_DECRYPT` | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves principales de varias regiones. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)Válido solo en claves principales de varias regiones. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves de cifrado simétricas con origen `AWS_KMS` u `EXTERNAL` origen. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)<br />Válido solo en claves de cifrado simétricas. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html)<br />Válido solo cuando `KeyUsage` es `SIGN_VERIFY`. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html)<br />La clave de KMS actual y la nueva clave de KMS deben ser del mismo tipo (ambas simétricas o ambas asimétricas o ambas HMAC) y deben tener el mismo [uso de clave](create-keys.md#key-usage). | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | 
| [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)Válido solo en claves de varias regiones. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html)<br />Solo es válido cuando `KeyUsage` es `SIGN_VERIFY`. | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Válido solo en claves HMAC de KMS |  ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png)  | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-successful.png) | ![](http://docs.aws.amazon.com/es_es/kms/latest/developerguide/images/icon-failed.png) |