Terraform reference for Yandex Key Management Service
Written by
Updated at July 14, 2025
With Terraform, you can quickly create a cloud infrastructure in Yandex Cloud and manage it using configuration files. These files store the infrastructure description written in HashiCorp Configuration Language (HCL). If you change the configuration files, Terraform automatically detects which part of your configuration is already deployed, and what should be added or removed.
Terraform is distributed under the Business Source License. The Yandex Cloud provider for Terraform is distributed under the MPL-2.0 license.
For more information about Terraform, see this tutorial.
Resources
Key Management Service supports the following Terraform resources :
| Terraform resource | Yandex Cloud resource |
|---|---|
| yandex_kms_asymmetric_encryption_key | Asymmetric encryption key pair |
| yandex_kms_asymmetric_encryption_key_iam_binding | Assigning access permissions for an asymmetric encryption key pair. We recommend using kms_asymmetric_encryption_key_iam_member instead of kms_asymmetric_encryption_key_iam_binding. |
| kms_asymmetric_encryption_key_iam_member | Assigning access permissions for an asymmetric digital signature key pair |
| yandex_kms_asymmetric_signature_key | Asymmetric digital signature key pair |
| yandex_kms_asymmetric_signature_key_iam_binding | Assigning access permissions for an asymmetric digital signature key pair. We recommend using kms_asymmetric_signature_key_iam_member instead of kms_asymmetric_signature_key_iam_binding. |
| kms_asymmetric_signature_key_iam_member | Assigning access permissions for an asymmetric digital signature key pair |
| yandex_kms_secret_ciphertext | Ciphertext |
| yandex_kms_symmetric_key | Symmetric encryption key |
| yandex_kms_symmetric_key_iam_binding | Assigning access permissions for a symmetric encryption key. We recommend using kms_symmetric_key_iam_member instead of kms_symmetric_key_iam_binding. |
| kms_symmetric_key_iam_member | Assigning access permissions for a symmetric encryption key |
Data sources
Key Management Service supports the following Terraform data sources:
| Terraform data source | Description |
|---|---|
| yandex_kms_asymmetric_encryption_key | Information about an asymmetric encryption key pair |
| yandex_kms_asymmetric_signature_key | Information about an asymmetric digital signature key pair |
| yandex_kms_symmetric_key | Information about a symmetric encryption key |