Data Source: oci_kms_vaults

This data source provides the list of Vaults in Oracle Cloud Infrastructure Kms service.

Lists the vaults in the specified compartment.

As a provisioning operation, this call is subject to a Key Management limit that applies to the total number of requests across all provisioning read operations. Key Management might throttle this call to reject an otherwise valid request when the total rate of provisioning read operations exceeds 10 requests per second for a given tenancy.

Example Usage

data "oci_kms_vaults" "test_vaults" {
	#Required
	compartment_id = var.compartment_id
}

Argument Reference

The following arguments are supported:

• compartment_id - (Required) The OCID of the compartment.

Attributes Reference

The following attributes are exported:

• vaults - The list of vaults.

Vault Reference

The following attributes are exported:

• compartment_id - The OCID of the compartment that contains a particular vault.
• crypto_endpoint - The service endpoint to perform cryptographic operations against. Cryptographic operations include Encrypt, Decrypt, and GenerateDataEncryptionKey operations.
• defined_tags - Defined tags for this resource. Each key is predefined and scoped to a namespace. For more information, see Resource Tags. Example: {"Operations.CostCenter": "42"}
• display_name - A user-friendly name for the vault. It does not have to be unique, and it is changeable. Avoid entering confidential information.
• external_key_manager_metadata_summary - Summary about metadata of external key manager to be returned to the customer as a response.
  • external_vault_endpoint_url - URL of the vault on external key manager.
  • oauth_metadata_summary - Summary about authorization to be returned to the customer as a response.
    • client_app_id - ID of the client app created in IDP.
    • idcs_account_name_url - Base URL of the IDCS account where confidential client app is created.
  • private_endpoint_id - OCID of the private endpoint.
  • vendor - Vendor of the external key manager.
• freeform_tags - Free-form tags for this resource. Each tag is a simple key-value pair with no predefined name, type, or namespace. For more information, see Resource Tags. Example: {"Department": "Finance"}
• id - The OCID of the vault.
• is_primary - A Boolean value that indicates whether the Vault is primary Vault or replica Vault.
• is_vault_replicable - A Boolean value that indicates whether the Vault has cross region replication capability. Always true for Virtual Private Vaults.
• management_endpoint - The service endpoint to perform management operations against. Management operations include “Create,” “Update,” “List,” “Get,” and “Delete” operations.
• replica_details - Vault replica details
  • replication_id - ReplicationId associated with a vault operation
• restored_from_vault_id - The OCID of the vault from which this vault was restored, if it was restored from a backup file. If you restore a vault to the same region, the vault retains the same OCID that it had when you backed up the vault.
• state - The vault’s current lifecycle state. Example: DELETED
• time_created - The date and time this vault was created, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z
• time_of_deletion - An optional property to indicate when to delete the vault, expressed in RFC 3339 timestamp format. Example: 2018-04-03T21:10:29.600Z
• vault_type - The type of vault. Each type of vault stores the key with different degrees of isolation and has different options and pricing.