As traduções são geradas por tradução automática. Em caso de conflito entre o conteúdo da tradução e da versão original em inglês, a versão em inglês prevalecerá.

# Referência de tipos de chaves
<a name="symm-asymm-compare"></a>

AWS KMS suporta recursos diferentes para diferentes *tipos* de chaves KMS. Por exemplo, somente é possível usar [chaves do KMS de criptografia simétrica](symm-asymm-choose-key-spec.md#symmetric-cmks) para [gerar chaves de dados simétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html) e [pares de chaves de dados assimétricas](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairs.html). Além disso, a [importação do material de chave](importing-keys.md) e o [rodízio de chaves automático](rotate-keys.md) são compatíveis somente com chaves do KMS de criptografia simétrica, e somente é possível criar chaves do KMS de criptografia simétrica em um [repositório de chaves personalizado](key-store-overview.md#custom-key-store-overview). 

Esta referência contém duas tabelas. 
+ A [tabela de tipos de chave](#key-type-table) lista as AWS KMS operações válidas para chaves KMS de criptografia simétrica, chaves KMS assimétricas e chaves HMAC KMS. 
+ A [tabela de recursos especiais](#special-features-table) apresenta as operações do AWS KMS que são válidas para chaves do KMS multirregionais, chaves do KMS com material de chave importado e chaves do KMS em armazenamentos de chaves personalizados.

## Tabela de tipos de chave
<a name="key-type-table"></a>

Talvez seja necessário rolar horizontalmente ou verticalmente para ver todos os dados nessa tabela.


| AWS KMS Operação de API | Chaves do KMS de criptografia simétrica | Chaves do KMS de HMAC | Chaves do KMS assimétricas (ENCRYPT\$1DECRYPT) | Chaves do KMS assimétricas (SIGN\$1VERIFY) | Chaves do KMS assimétricas (KEY\$1AGREEMENT) | 
| --- | --- | --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | Sim | Sim | Sim | Sim | Sim | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
| [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) |  Sim  | Sim |  Sim  |  Sim  | Sim | 
|  [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  Sim  | Não |  Sim  | Não | Não | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) É válido somente em chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`).  |  Sim  | Sim | Sim | Sim | Sim | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  | Não | Não | Não | Não | Sim | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  Sim Válido somente em chaves KMS com material (`Origin`s`AWS_KMS`) de AWS KMS chave.  | Não |  Não  | Não | Não | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  Sim Válido somente em chaves KMS com material (`Origin`s`AWS_KMS`) de AWS KMS chave.  | Não |  Não  | Não | Não | 
|  [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  Sim  | Não |  Sim  | Não | Não | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  Sim   | Não |  Não  | Não | Não | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) Gera um par de chaves de dados assimétricas que é protegido por uma chave do KMS de criptografia simétrica.  | Sim Não é válido com chaves do KMS em armazenamentos de chaves personalizados. | Não |  Não  | Não | Não | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) Gera um par de chaves de dados assimétricas que é protegido por uma chave do KMS de criptografia simétrica.  |  Sim  Não é válido com chaves do KMS em armazenamentos de chaves personalizados.  | Não |  Não  | Não | Não | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  Sim  | Não |  Não  | Não | Não | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) | Não | Sim | Não | Não | Não | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  Sim  |  Sim (`KeyRotationEnabled` sempre será `false`.)  |  Sim (`KeyRotationEnabled` sempre será `false`.)  |  Sim (`KeyRotationEnabled` sempre será `false`.)  |  Sim (`KeyRotationEnabled` sempre será `false`.)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) É válido somente em chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`).  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html)  |  Não  | Não |  Sim  | Sim | Sim | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) É válido somente em chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`).  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  | Sim | Sim (O campo `Rotations` sempre será nulo ou vazio.) | Sim (O campo `Rotations` sempre será nulo ou vazio.) | Sim (O campo `Rotations` sempre será nulo ou vazio.) | Sim (O campo `Rotations` sempre será nulo ou vazio.) | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  Sim  | Não |  Sim  | Não | Não | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) - Válido somente em chaves de várias regiões  |  Sim  | Sim |  Sim  |  Sim  | Sim | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  Sim  | Sim |  Sim  |  Sim  | Sim | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  | Sim Válido somente para chaves do KMS de criptografia simétrica gerenciadas pelo cliente, com a origem `AWS_KMS` ou `EXTERNAL`. | Não | Não | Não | Não | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html)  |  Não  | Não |  Não  | Sim | Não | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) A chave do KMS atual e a nova chave do KMS devem ser do mesmo tipo (ambas simétricas, assimétricas ou HMAC) e devem ter o mesmo [uso de chave](create-keys.md#key-usage).  | Sim | Sim |  Sim  | Sim | Sim | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  Sim  | Sim |  Sim  | Sim | Sim | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) - Válido somente em chaves de várias regiões  |  Sim  | Sim |  Sim  |  Sim  | Sim | 
|  [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html)  |  Não  | Não |  Não  | Sim | Não | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) | Não | Sim | Não | Não | Não | 

## Tabela de recursos especiais
<a name="special-features-table"></a>

Esta tabela mostra as operações de AWS KMS API que são suportadas em cada tipo de chave *de propósito especial*. 

Ao ler esta tabela, esteja ciente destas interações:
+ [Chaves de várias regiões](multi-region-keys-overview.md): 
  + Chaves do KMS multirregionais podem ser chaves de criptografia do KMS simétricas, chaves do KMS assimétricas, chaves do KMS de HMAC e chaves do KMS com material de chave importado.
  + Não é possível criar chaves de várias Regiões em um armazenamento de chaves personalizado.
+ [Material de chave importado](importing-keys.md)
  + É possível importar material de chave importado para chave do KMS simétricas, chaves do KMS assimétricas e chaves do KMS de HMAC.
  + É possível [chaves de várias regiões com material de chave importado](multi-region-keys-overview.md).
  + Você não pode criar chaves do KMS com material de chave em um armazenamento de chaves personalizado. 
  + A alternância automática de chaves (`EnableKeyRotation`, `DisableKeyRotation`) não é compatível com chaves do KMS com material de chave importado.
  + A rotação de chaves sob demanda (`RotateKeyOnDemand`) é compatível com chaves KMS de criptografia simétrica com material de chave importado.
+ [Armazenamentos de chaves personalizados](key-store-overview.md#custom-key-store-overview)
  + Armazenamentos personalizados de chaves são compatíveis apenas com chaves do KMS de criptografia simétrica.
  + Operações simétricas em pares de chaves assimétricas (`GenerateDataKeyPair`, `GenerateDataKeyPairWithoutPlaintext`) não são compatíveis com chaves do KMS em armazenamentos de chaves personalizados.
  + A alternância automática de chaves (`EnableKeyRotation`, `DisableKeyRotation`) não é compatível com chaves do KMS em armazenamentos personalizados de chaves.
  + Não é possível criar chaves de várias regiões em armazenamentos personalizados de chaves.

Talvez seja necessário rolar horizontalmente ou verticalmente para ver todos os dados nessa tabela.


| AWS KMS Operação de API | Chaves de várias regiões | Material de chave importado | Chaves do KMS em um armazenamento de chaves personalizado | 
| --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
| [ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) Você pode usar `CreateKey` para criar uma chave primária multirregional, chaves do KMS com material de chave importado ou uma chave do KMS em um armazenamento de chaves personalizado. Para criar uma chave de réplica multirregional, use `ReplicateKey`. | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | 
|  [Decrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  Válido somente quando `KeyUsage` é `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) É válido somente para chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png) | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente quando `KeyUsage` é `KEY_AGREEMENT`  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente quando `KeyUsage` é `KEY_AGREEMENT`  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas com material (`Origin`s`AWS_KMS`) de AWS KMS chave.  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves do KMS de criptografia simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas com material (`Origin`s`AWS_KMS`) de AWS KMS chave.  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente quando `KeyUsage` é `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  Válido somente em chaves do KMS de criptografia simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves do KMS de criptografia simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves do KMS de criptografia simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves do KMS de criptografia simétricas  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)Válido somente em chaves do KMS de HMAC |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png) | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` sempre será `false`.)  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) É válido somente para chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) Válido somente para [chaves do KMS assimétricas](symmetric-asymmetric.md).  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) É válido somente para chaves do KMS com material de chave importado (`Origin` é `EXTERNAL`).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas com `EXTERNAL` origem `AWS_KMS` ou.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente quando `KeyUsage` é `ENCRYPT_DECRYPT`  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves primárias multirregionais.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves primárias multirregionais.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas com `EXTERNAL` origem `AWS_KMS` ou.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves de criptografia simétricas.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [Sign](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) Válido apenas quando `KeyUsage` é `SIGN_VERIFY`.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) - A chave do KMS atual e a nova chave do KMS devem ser do mesmo tipo (ambas simétricas, assimétricas ou HMAC) e devem ter o mesmo [uso de chave](create-keys.md#key-usage).  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) Válido somente em chaves multirregionais.  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
|  [Verificar](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) Válido somente quando `KeyUsage` é `SIGN_VERIFY`.  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png)  | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) Válido somente em chaves do KMS de HMAC |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/pt_br/kms/latest/developerguide/images/icon-failed.png) |