yandex_kms_asymmetric_signature_key (Resource)
Written by
Updated at October 2, 2025
An asymmetric KMS key that may contain several versions of the cryptographic material.
Example usage
//
// Create a new KMS Assymetric Signature Key.
//
resource "yandex_kms_asymmetric_signature_key" "key-a" {
name = "example-asymetric-signature-key"
description = "description for key"
signature_algorithm = "RSA_2048_SIGN_PSS_SHA_256"
}
Schema
Optional
asymmetric_signature_key_id(String) ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use a [AsymmetricSignatureKeyService.List] request.deletion_protection(Boolean) Flag that inhibits deletion of the keydescription(String) Description of the key.folder_id(String) ID of the folder that the key belongs to.id(String) ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use a [AsymmetricSignatureKeyService.List] request.labels(Map of String) Custom labels for the key askey:valuepairs. Maximum 64 per key.name(String) Name of the key.signature_algorithm(String) Signature Algorithm ID.status(String) Current status of the key.timeouts(Block, Optional) (see below for nested schema)
Read-Only
created_at(String) Time when the key was created.
Nested Schema for timeouts
Optional:
create(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).delete(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.read(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Read operations occur during any refresh or planning operation when refresh is enabled.update(String) A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
Import
The resource can be imported by using their resource ID. For getting the resource ID you can use Yandex Cloud Web Console
# terraform import yandex_kms_asymmetric_signature_key.<resource Name> <resource Id>
terraform import yandex_kms_asymmetric_signature_key.key-a abjjf**********p3gp8