本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# 金鑰類型參考
<a name="symm-asymm-compare"></a>

AWS KMS 支援不同類型的 KMS 金鑰**的不同功能。例如，您只能使用[對稱加密 KMS 金鑰](symm-asymm-choose-key-spec.md#symmetric-cmks)產生[對稱資料金鑰](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)和[非對稱資料金鑰對](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairs.html)。此外，僅對稱加密 KMS 金鑰支援[金鑰資料匯入](importing-keys.md)和[金鑰自動輪換](rotate-keys.md)，而且只能在[自訂金鑰存放區](key-store-overview.md#custom-key-store-overview)中建立對稱加密 KMS 金鑰。

此參考包括兩個資料表。
+ [金鑰類型資料表](#key-type-table)列出對對稱加密 KMS 金鑰、非對稱 KMS 金鑰和 HMAC KMS 金鑰有效的 AWS KMS 操作。
+ [特殊功能資料表](#special-features-table)列出多區域 KMS 金鑰、含有匯入金鑰材料的 KMS 金鑰以及自訂金鑰存放區中的 KMS 金鑰的有效 AWS KMS 操作。

## 金鑰類型資料表
<a name="key-type-table"></a>

您可能需要水平或垂直捲動，才能查看此資料表中的所有資料。


| AWS KMS API 操作 | 對稱加密 KMS 金鑰 | HMAC KMS 金鑰 | 非對稱 KMS 金鑰 (ENCRYPT\$1DECRYPT) | 非對稱 KMS 金鑰 (SIGN\$1VERIFY) | 非對稱 KMS 金鑰 (KEY\$1AGREEMENT) | 
| --- | --- | --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | 是 | 是 | 是 | 是 | 是 | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  是  | 是 |  是  | 是 | 是 | 
| [CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) |  是  | 是 |  是  |  是  | 是 | 
|  [解密](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  是  | 否 |  是  | 否 | 否 | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html) 僅對含有匯入金鑰材料的 KMS 金鑰有效 (`Origin` 為 `EXTERNAL`)。  |  是  | 是 | 是 | 是 | 是 | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  | 否 | 否 | 否 | 否 | 是 | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  是 僅適用於具有金鑰材料 (`Origin` 為 `AWS_KMS`) 的 KMS AWS KMS 金鑰。  | 否 |  否  | 否 | 否 | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  是 僅適用於具有金鑰材料 (`Origin` 為 `AWS_KMS`) 的 KMS AWS KMS 金鑰。  | 否 |  否  | 否 | 否 | 
|  [加密](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  是  | 否 |  是  | 否 | 否 | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  是   | 否 |  否  | 否 | 否 | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html) 產生受對稱加密 KMS 金鑰保護的非對稱資料金鑰對。  | 是 對於自訂金鑰存放區中的 KMS 金鑰無效。 | 否 |  否  | 否 | 否 | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html) 產生受對稱加密 KMS 金鑰保護的非對稱資料金鑰對。  |  是  對於自訂金鑰存放區中的 KMS 金鑰無效。  | 否 |  否  | 否 | 否 | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  是  | 否 |  否  | 否 | 否 | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html) | 否 | 是 | 否 | 否 | 否 | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  是  |  是 (`KeyRotationEnabled` 一律為 `false`.)  |  是 (`KeyRotationEnabled` 一律為 `false`.)  |  是 (`KeyRotationEnabled` 一律為 `false`.)  |  是 (`KeyRotationEnabled` 一律為 `false`.)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html) 僅對含有匯入金鑰材料的 KMS 金鑰有效 (`Origin` 為 `EXTERNAL`)。  |  是  | 是 |  是  | 是 | 是 | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html)  |  否  | 否 |  是  | 是 | 是 | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html) 僅對含有匯入金鑰材料的 KMS 金鑰有效 (`Origin` 為 `EXTERNAL`)。  |  是  | 是 |  是  | 是 | 是 | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  | 是 | 是 ( `Rotations` 欄位一律為 null 或空白。) | 是 ( `Rotations` 欄位一律為 null 或空白。) | 是 ( `Rotations` 欄位一律為 null 或空白。) | 是 ( `Rotations` 欄位一律為 null 或空白。) | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  是  | 否 |  是  | 否 | 否 | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html) - 僅適用於多區域金鑰  |  是  | 是 |  是  |  是  | 是 | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  是  | 是 |  是  |  是  | 是 | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  | 是 僅適用於使用 `AWS_KMS`或 `EXTERNAL`原始伺服器的客戶受管對稱加密 KMS 金鑰。 | 否 | 否 | 否 | 否 | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [符號](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html)  |  否  | 否 |  否  | 是 | 否 | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) 目前的 KMS 金鑰和新的 KMS 金鑰必須是相同類型 (兩者皆為對稱或皆為非對稱或皆為 HMAC)，且必須具有相同的[金鑰用途](create-keys.md#key-usage)。  | 是 | 是 |  是  | 是 | 是 | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  是  | 是 |  是  | 是 | 是 | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html) - 僅適用於多區域金鑰  |  是  | 是 |  是  |  是  | 是 | 
|  [確認](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html)  |  否  | 否 |  否  | 是 | 否 | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) | 否 | 是 | 否 | 否 | 否 | 

## 特殊功能資料表
<a name="special-features-table"></a>

此資料表顯示每種*特殊用途金鑰*類型支援的 AWS KMS API 操作。

閱讀此資料表時，請注意下列互動：
+ [多區域金鑰](multi-region-keys-overview.md)：
  + 多區域金鑰可以是對稱加密 KMS 金鑰、非對稱 KMS 金鑰、HMAC KMS 金鑰、含有匯入金鑰材料的 KMS 金鑰。
  + 您無法在自訂金鑰存放區建立多區域金鑰。
+ [匯入的金鑰資料](importing-keys.md)
  + 您可針對對稱加密 KMS 金鑰、非對稱 KMS 金鑰，以及 HMAC KMS 金鑰匯入金鑰資料。
  + 您可[利用匯入金鑰資料來建立多區域金鑰](multi-region-keys-overview.md)。
  + 您無法在自訂金鑰存放區中建立含有匯入金鑰材料的金鑰。
  + 具有匯入金鑰資料的 KMS 金鑰不支援自動金鑰輪換 (`EnableKeyRotation`、`DisableKeyRotation`)。
  + 具有匯入金鑰材料的對稱加密 KMS 金鑰支援隨需金鑰輪換 (`RotateKeyOnDemand`)。
+ [自訂金鑰存放區](key-store-overview.md#custom-key-store-overview)
  + 自訂金鑰存放區僅支援對稱加密 KMS 金鑰。
  + 自訂金鑰存放區中的 KMS 金鑰不支援非對稱金鑰對 (`GenerateDataKeyPair`、`GenerateDataKeyPairWithoutPlaintext`) 的對稱操作。
  + 自訂金鑰存放區中的 KMS 金鑰不支援自動金鑰輪換 (`EnableKeyRotation`、`DisableKeyRotation`)。
  + 您無法在自訂金鑰存放區建立多區域金鑰。

您可能需要水平或垂直捲動，才能查看此資料表中的所有資料。


| AWS KMS API 操作 | 多區域金鑰 | 匯入的金鑰資料 | 在自訂金鑰存放區中的 KMS 金鑰 | 
| --- | --- | --- | --- | 
|  [CancelKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_CancelKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [CreateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateAlias.html)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | 
|  [CreateGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
| [ CreateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_CreateKey.html) 您可以使用 `CreateKey` 來建立多區域主要金鑰、含有匯入金鑰材料的 KMS 金鑰，或者自訂金鑰存放區中的 KMS 金鑰。若要建立多區域複本金鑰，請使用 `ReplicateKey`。 | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | 
|  [解密](https://docs.aws.amazon.com/kms/latest/APIReference/API_Decrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  只有在 `KeyUsage` 為 `ENCRYPT_DECRYPT` 時有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteAlias.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DeleteImportedKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeleteImportedKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對含有匯入金鑰材料的金鑰有效 (`Origin` 為 `EXTERNAL`)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png) | 
|  [DeriveSharedSecret](https://docs.aws.amazon.com/kms/latest/APIReference/API_DeriveSharedSecret.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅在 `KeyUsage`為 時有效`KEY_AGREEMENT`)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅在 `KeyUsage`為 時有效`KEY_AGREEMENT`)  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [DescribeKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [DisableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_DisableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅適用於具有金鑰材料 (`Origin` 為 `AWS_KMS`) 的對稱加密 AWS KMS 金鑰。  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [EnableKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對對稱加密 KMS 金鑰有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [EnableKeyRotation](https://docs.aws.amazon.com/kms/latest/APIReference/API_EnableKeyRotation.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅適用於具有金鑰材料 (`Origin` 為 `AWS_KMS`) 的對稱加密 AWS KMS 金鑰。  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [加密](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 只有在 `KeyUsage` 為 `ENCRYPT_DECRYPT` 時有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  僅對對稱加密 KMS 金鑰有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GenerateDataKeyPair](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPair.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對對稱加密 KMS 金鑰有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyPairWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyPairWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對對稱加密 KMS 金鑰有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GenerateDataKeyWithoutPlaintext](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateDataKeyWithoutPlaintext.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對對稱加密 KMS 金鑰有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
| [GenerateMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_GenerateMac.html)僅對 HMAC KMS 金鑰有效 |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png) | 
|  [GetKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [GetKeyRotationStatus](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetKeyRotationStatus.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) (`KeyRotationEnabled` 一律為 `false`.)  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetParametersForImport](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetParametersForImport.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對含有匯入金鑰材料的金鑰有效 (`Origin` 為 `EXTERNAL`)。  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [GetPublicKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_GetPublicKey.html) 僅對[非對稱 KMS 金鑰](symmetric-asymmetric.md)有效。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ImportKeyMaterial](https://docs.aws.amazon.com/kms/latest/APIReference/API_ImportKeyMaterial.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對含有匯入金鑰材料的金鑰有效 (`Origin` 為 `EXTERNAL`)。  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ListAliases](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListAliases.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyPolicies](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyPolicies.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListKeyRotations](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListKeyRotations.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅適用於具有 `AWS_KMS`或 `EXTERNAL`原始伺服器的對稱加密金鑰。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅在對稱加密金鑰上有效。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListResourceTags](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListResourceTags.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ListRetirableGrants](https://docs.aws.amazon.com/kms/latest/APIReference/API_ListRetirableGrants.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [PutKeyPolicy](https://docs.aws.amazon.com/kms/latest/APIReference/API_PutKeyPolicy.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReEncrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReEncrypt.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 只有在 `KeyUsage` 為 `ENCRYPT_DECRYPT` 時有效  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [ReplicateKey](https://docs.aws.amazon.com/kms/latest/APIReference/API_ReplicateKey.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對多區域主金鑰有效。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對多區域主金鑰有效。  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [RetireGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RetireGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RevokeGrant](https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [RotateKeyOnDemand](https://docs.aws.amazon.com/kms/latest/APIReference/API_RotateKeyOnDemand.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅適用於具有 `AWS_KMS`或 `EXTERNAL`原始伺服器的對稱加密金鑰。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅在對稱加密金鑰上有效。  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [ScheduleKeyDeletion](https://docs.aws.amazon.com/kms/latest/APIReference/API_ScheduleKeyDeletion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [符號](https://docs.aws.amazon.com/kms/latest/APIReference/API_Sign.html) 只有在 `KeyUsage` 為 `SIGN_VERIFY` 時有效。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [TagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_TagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UntagResource](https://docs.aws.amazon.com/kms/latest/APIReference/API_UntagResource.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateAlias](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateAlias.html) - 目前的 KMS 金鑰和新的 KMS 金鑰必須是相同類型 (兩者皆為對稱或皆為非對稱或皆為 HMAC)，且必須具有相同的[金鑰用途](create-keys.md#key-usage)。  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateKeyDescription](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateKeyDescription.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | 
|  [UpdateReplicaRegion](https://docs.aws.amazon.com/kms/latest/APIReference/API_UpdateReplicaRegion.html)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) 僅對多區域金鑰有效。  |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
|  [確認](https://docs.aws.amazon.com/kms/latest/APIReference/API_Verify.html) 只有在 `KeyUsage` 為 `SIGN_VERIFY` 時有效。  |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) |  ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png)  | 
| [VerifyMac](https://docs.aws.amazon.com/kms/latest/APIReference/API_VerifyMac.html) 僅對 HMAC KMS 金鑰有效 |  ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png)  | ![\[Green checkmark icon indicating success or completion.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-successful.png) | ![\[Red circle with diagonal line, commonly used to indicate prohibition or "no" symbol.\]](http://docs.aws.amazon.com/zh_tw/kms/latest/developerguide/images/icon-failed.png) |