How to select a KMS API - Key Management Service - Alibaba Cloud Documentation Center

KMS provides OpenAPI and KMS Instance API. Choose the one best suited to your needs.

Operation type	Description
Management operations	Manage resources such as keys, secrets, tags, and aliases. Only OpenAPI supports management operations. For more information, see API overview.
Service-related operations	Cryptographic operations: Use either OpenAPI or KMS Instance API. OpenAPI: Cryptographic operations. KMS Instance API: Cryptographic operations. Secret retrieval: Use OpenAPI (GetSecretValue) or KMS Instance API (GetSecretValue).