secure_unwrap_keys
Creates, updates, deletes, gets or lists a secure_unwrap_keys resource.
Overview
| Name | secure_unwrap_keys |
| Type | Resource |
| Id | azure.key_vault_keys.secure_unwrap_keys |
Fields
The following fields are returned by SELECT queries:
SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
secure_unwrap_key | exec | key_name, key_version, vault_name, alg, value, target | Securely unwraps a previously wrapped symmetric key using a specified key, ensuring TEE attestation via Microsoft Azure Attestation (MAA) before unwrapping. The SECURE UNWRAP operation supports decryption of a symmetric key using the target key encryption key. This operation is the reverse of the SECURE WRAP operation. The SECURE UNWRAP operation applies to asymmetric and symmetric keys stored in Azure Key Vault since it uses the private portion of the key. This operation requires the keys/unwrapKey permission. The SECURE UNWRAP operation ensures that MAA (Microsoft Azure Attestation Service) is used to attest the TEE (Trusted Execution Environment) before the key is unwrapped. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
key_name | string | The name of the key. Required. |
key_version | string | The version of the key. Required. |
vault_name | string | Key vault name. (default: ) |
Lifecycle Methods
- secure_unwrap_key
Securely unwraps a previously wrapped symmetric key using a specified key, ensuring TEE attestation via Microsoft Azure Attestation (MAA) before unwrapping. The SECURE UNWRAP operation supports decryption of a symmetric key using the target key encryption key. This operation is the reverse of the SECURE WRAP operation. The SECURE UNWRAP operation applies to asymmetric and symmetric keys stored in Azure Key Vault since it uses the private portion of the key. This operation requires the keys/unwrapKey permission. The SECURE UNWRAP operation ensures that MAA (Microsoft Azure Attestation Service) is used to attest the TEE (Trusted Execution Environment) before the key is unwrapped.
EXEC azure.key_vault_keys.secure_unwrap_keys.secure_unwrap_key
@key_name='{{ key_name }}' --required,
@key_version='{{ key_version }}' --required,
@vault_name='{{ vault_name }}' --required
@@json=
'{
"alg": "{{ alg }}",
"value": "{{ value }}",
"target": "{{ target }}"
}'
;