You can call this operation to query the details of a key for an ApsaraDB for MongoDB instance.

When you call this operation, the instance must have transparent data encryption (TDE) enabled in BYOK mode. You can call the ModifyDBInstanceTDE operation to enable TDE.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String No DescribeDBInstanceEncryptionKey

The operation that you want to perform. Set the value to DescribeDBInstancePerformance.

DBInstanceId String Yes dds-bpxxxxxxxx

The ID of the instance.

EncryptionKey String No 2axxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

The custom key for the instance. You can call the DescribeUserEncryptionKeyList operation to query the list of custom keys for an ApsaraDB for MongoDB instance.

Response parameters

Parameter Type Example Description
RequestId String 783C2062-A2D3-4EA8-88AD-E43F990C23BB

The ID of the request.

EncryptionKey String 2axxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx

The key for the instance.

Description String key description example

The description of the key for the instance.

KeyUsage String ENCRYPT/DECRYPT

The purpose of the key for the instance.

DeleteDate String 2020-07-06T18:22:03Z

The scheduled time when the key for the instance will be deleted. If the value is empty, the key will not be deleted.

Creator String 123456

The UID of the key creator.

EncryptionKeyStatus String Enabled

Indicates whether the key for the instance is enabled. Valid values:

  • Enabled
  • Disabled
Origin String Aliyun_KMS

The source of the key for the instance.

MaterialExpireTime String 2020-07-06T18:22:03Z

The expiration time of the key for the instance. The time is displayed in UTC. If the value is empty, the key for the instance will not expire.

Examples

Sample requests

http(s)://mongodb.aliyuncs.com/? Action=DescribeDBInstanceEncryptionKey
&DBInstanceId=dds-bpxxxxxxxx
&<Common request parameters>

Sample success responses

XML format

<EncryptionKey>2axxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx</EncryptionKey>
<Description/>
<DeleteDate/>
<Creator>123456</Creator>
<RequestId>783C2062-A2D3-4EA8-88AD-E43F990C23BB</RequestId>
<MaterialExpireTime/>
<EncryptionKeyStatus>Enabled</EncryptionKeyStatus>
<Origin>Aliyun_KMS</Origin>
<KeyUsage>ENCRYPT/DECRYPT</KeyUsage>

JSON format

{
	"EncryptionKey": "2axxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
	"Description": "",
	"DeleteDate": "",
	"Creator": "123456",
	"RequestId": "783C2062-A2D3-4EA8-88AD-E43F990C23BB",
	"MaterialExpireTime": "",
	"EncryptionKeyStatus": "Enabled",
	"Origin": "Aliyun_KMS",
	"KeyUsage": "ENCRYPT/DECRYPT"
}

Error codes

For a list of error codes, visit the API Error Center.