update_alias Method

Updates an alias to refer to a different CMK.

Syntax

def update_alias(alias_name: str, new_key_id: str) -> None: ...

Remarks

This method updates the alias named AliasName, changing it so that it refers to the CMK specified by NewKeyId.

The value passed for the AliasName parameter must include the alias/ prefix, and must be the name of an alias in the current account and region

The value passed for the NewKeyId parameter must be the Id or ARN of a CMK in the current account and region. The specified CMK must be of the same type (i.e., symmetric or asymmetric) and have the same usage (i.e., encryption/decryption or signing/verification) as the CMK that the alias currently refers to.

This method will fail if the specified alias is AWS-managed (i.e., its name begins with alias/aws/). This method will also fail if the specified CMK's state is aksPendingDeletion (2), or if it is AWS-managed (see key_aws_managed).