thalesgroup / thalesgroup.ciphertrust / 1.0.0 / module / cckm_aws_kms CCKM module for AWS Key Management System | "added in version" 1.0.0 of thalesgroup.ciphertrust" Authors: Anurag Jain, Developer Advocate Thales Groupthalesgroup.ciphertrust.cckm_aws_kms (1.0.0) — module
Install with ansible-galaxy collection install thalesgroup.ciphertrust:==1.0.0
collections: - name: thalesgroup.ciphertrust version: 1.0.0
This is a Thales CipherTrust Manager module for working with the CipherTrust Manager APIs, more specifically with CCKM for AWS KMS
- name: "Create CCKM AWS KMS" thalesgroup.ciphertrust.cckm_aws_kms: localNode: server_ip: "IP/FQDN of CipherTrust Manager" server_private_ip: "Private IP in case that is different from above" server_port: 5432 user: "CipherTrust Manager Username" password: "CipherTrust Manager Password" verify: false op_type: create
acls: description: acls type: list name: description: Unique name for the KMS. type: str kms_id: description: AWS KMS ID to be acted upton type: str op_type: choices: - create - update - update-acls description: Operation to be performed required: true type: str regions: description: AWS regions to be added to the CCKM. type: list localNode: description: - this holds the connection parameters required to communicate with an instance of CipherTrust Manager (CM) - holds IP/FQDN of the server, username, password, and port required: true suboptions: password: description: admin password of CM required: true type: str server_ip: description: CM Server IP or FQDN required: true type: str server_port: default: 5432 description: Port on which CM server is listening required: true type: int server_private_ip: description: internal or private IP of the CM Server, if different from the server_ip required: true type: str user: description: admin username of CM required: true type: str verify: default: false description: if SSL verification is required required: true type: bool type: dict account_id: description: ID of the AWS account. type: str connection: description: Name or ID of the connection in which the account is managed. type: str assume_role_arn: description: Amazon Resource Name (ARN) of the role to be assumed. type: str assume_role_external_id: description: External ID for the role to be assumed. This parameter can be specified only with "assume_role_arn". type: str