The following tables list the API operations available for use in Dedicated KMS and their descriptions.

Key-related operations

Operation Description
Encrypt Encrypts plaintext to ciphertext.
Decrypt Decrypts ciphertext into plaintext.
Sign Generates a signature by using an asymmetric customer master key (CMK).
Verify Verifies a signature by using an asymmetric CMK.
GenerateDataKey Generates a plaintext data key and ciphertext data key. You can use the plaintext data key to symmetrically encrypt data.
GetPublicKey Queries the public key of a specified asymmetric CMK.

Secret-related operations

Operation Description
GetSecretValue Queries a secret value.

Other operations

Operation Description
GenerateRandom Generates a random number.