Associates additional same-region VPCs with your KMS instance after enabling it to facilitate cross-VPC access. Note that subsequent associations will overwrite previous UpdateKmsInstanceBindVpc configurations.
VPC and KMS account association
Same account
No additional network configuration is required.
Different accounts
Configure resource sharing to grant the KMS instance's Alibaba Cloud account access to at least one vSwitch within your VPC. For instructions, see Resource owner enables VPC sharing.
Resource quotas
Each VPC association with a KMS instance consumes one Access Management quantity. Upgrade a KMS instance to increase the quantity.
Debugging
Request parameters
Parameter | Type | Required | Example | Description |
Action | String | Yes | UpdateKmsInstanceBindVpc | The operation that you want to perform. Set the value to UpdateKmsInstanceBindVpc. |
KmsInstanceId | String | Yes | kst-phzz64f722a1buamw0**** | The ID of the KMS instance. |
BindVpcs | String | Yes | [{"VpcId":"vpc-bp1go9qvmj78j4f4c****","VSwitchId":"vsw-bp16c5pvvcf0fp5b9****","RegionId":"ap-southeast-1","VpcOwnerId":120708975881****},{"VpcId":"vpc-bp14c07ucxg6h1xjm****","VSwitchId":"vsw-bp1wujtnspi1l3gvu****","RegionId":"ap-southeast-1","VpcOwnerId":119285303511****}] | The VPC configuration. This parameter is a JSON array. Each element describes a VPC, namely the following:
Format:
|
Response parameters
Parameter | Type | Example | Description |
RequestId | String | d3eca5c8-a856-4347-8eb6-e1898c3fda2e | The ID of the request, which is used to locate and troubleshoot issues. |
Examples
Sample requests
http(s)://[Endpoint]/?Action=UpdateKmsInstanceBindVpc
&KmsInstanceId=kst-phzz64f722a1buamw0****
&BindVpcs=[{\"VpcId\":\"vpc-bp1go9qvmj78j4f4c****\",\"VSwitchId\":\"vsw-bp16c5pvvcf0fp5b9****\",\"RegionId\":\"cn-hangzhou\",\"VpcOwnerId\":120708975881****},{\"VpcId\":\"vpc-bp14c07ucxg6h1xjm****\",\"VSwitchId\":\"vsw-bp1wujtnspi1l3gvu****\",\"RegionId\":\"cn-hangzhou\",\"VpcOwnerId\":119285303511****}]
&Common request parametersSample success responses
XML format
HTTP/1.1 200 OK
Content-Type:application/xml
<UpdateKmsInstanceBindVpcResponse>
<RequestId>d3eca5c8-a856-4347-8eb6-e1898c3fda2e</RequestId>
</UpdateKmsInstanceBindVpcResponse>JSON format
HTTP/1.1 200 OK
Content-Type:application/json
{
"RequestId" : "d3eca5c8-a856-4347-8eb6-e1898c3fda2e"
}Error codes
For a list of error codes, see Service error codes.