KMS (Key Management Service)

import com.pulumi.aws.kms.Key;
import com.pulumi.aws.kms.KeyArgs;
import com.pulumi.aws.kms.Alias;
import com.pulumi.aws.kms.AliasArgs;
import com.pulumi.aws.kms.Grant;
import com.pulumi.aws.kms.GrantArgs;
import com.pulumi.aws.kms.ExternalKey;
import com.pulumi.aws.kms.ExternalKeyArgs;
import com.pulumi.aws.kms.ReplicaKey;
import com.pulumi.aws.kms.ReplicaKeyArgs;
import com.pulumi.aws.kms.KmsFunctions;

@ResourceType(type="aws:kms/key:Key")
public class Key extends com.pulumi.resources.CustomResource {
    public Key(String name);
    public Key(String name, @Nullable KeyArgs args);
    public Key(String name, @Nullable KeyArgs args, @Nullable CustomResourceOptions options);

    // Exported Properties
    public Output<String> id();
    public Output<String> arn();
    public Output<String> keyId();
    public Output<Optional<String>> description();
    public Output<Optional<String>> keyUsage();
    public Output<Optional<String>> customerMasterKeySpec();
    public Output<Optional<String>> policy();
    public Output<Optional<Boolean>> bypassPolicyLockoutSafetyCheck();
    public Output<Optional<Integer>> deletionWindowInDays();
    public Output<Optional<Boolean>> isEnabled();
    public Output<Optional<Boolean>> enableKeyRotation();
    public Output<Optional<Boolean>> multiRegion();
    public Output<Optional<String>> customKeyStoreId();
    public Output<Optional<String>> xksKeyId();
    public Output<Optional<Map<String, String>>> tags();
    public Output<Map<String, String>> tagsAll();
}

public class KeyArgs extends com.pulumi.resources.ResourceArgs {
    public static Builder builder() { return new Builder(); }

    public static final class Builder {
        // Basic Configuration
        public Builder description(Output<String> description);
        public Builder keyUsage(Output<String> keyUsage);
        public Builder customerMasterKeySpec(Output<String> customerMasterKeySpec);

        // Policy
        public Builder policy(Output<String> policy);
        public Builder bypassPolicyLockoutSafetyCheck(Output<Boolean> bypassPolicyLockoutSafetyCheck);

        // Lifecycle
        public Builder deletionWindowInDays(Output<Integer> deletionWindowInDays);
        public Builder isEnabled(Output<Boolean> isEnabled);

        // Rotation
        public Builder enableKeyRotation(Output<Boolean> enableKeyRotation);
        public Builder rotationPeriodInDays(Output<Integer> rotationPeriodInDays);

        // Multi-Region
        public Builder multiRegion(Output<Boolean> multiRegion);

        // Custom Key Store
        public Builder customKeyStoreId(Output<String> customKeyStoreId);
        public Builder xksKeyId(Output<String> xksKeyId);

        // Tags
        public Builder tags(Output<Map<String, String>> tags);

        public KeyArgs build();
    }
}

@ResourceType(type="aws:kms/alias:Alias")
public class Alias extends com.pulumi.resources.CustomResource {
    public Alias(String name, AliasArgs args);
    public Alias(String name, AliasArgs args, @Nullable CustomResourceOptions options);

    // Exported Properties
    public Output<String> id();
    public Output<String> arn();
    public Output<String> name();
    public Output<String> namePrefix();
    public Output<String> targetKeyId();
    public Output<String> targetKeyArn();
}

public class AliasArgs extends com.pulumi.resources.ResourceArgs {
    public static Builder builder() { return new Builder(); }

    public static final class Builder {
        // Name (either name or namePrefix required)
        public Builder name(Output<String> name);
        public Builder namePrefix(Output<String> namePrefix);

        // Required
        public Builder targetKeyId(Output<String> targetKeyId);

        public AliasArgs build();
    }
}

@ResourceType(type="aws:kms/grant:Grant")
public class Grant extends com.pulumi.resources.CustomResource {
    public Grant(String name, GrantArgs args);
    public Grant(String name, GrantArgs args, @Nullable CustomResourceOptions options);

    // Exported Properties
    public Output<String> id();
    public Output<String> grantId();
    public Output<String> grantToken();
    public Output<String> keyId();
    public Output<String> granteePrincipal();
    public Output<List<String>> operations();
    public Output<Optional<GrantConstraints>> constraints();
    public Output<Optional<String>> name();
    public Output<Optional<List<String>>> retireOnDelete();
    public Output<Optional<String>> retiringPrincipal();
}

public class GrantArgs extends com.pulumi.resources.ResourceArgs {
    public static Builder builder() { return new Builder(); }

    public static final class Builder {
        // Required
        public Builder keyId(Output<String> keyId);
        public Builder granteePrincipal(Output<String> granteePrincipal);
        public Builder operations(Output<List<String>> operations);

        // Optional
        public Builder name(Output<String> name);
        public Builder retiringPrincipal(Output<String> retiringPrincipal);
        public Builder constraints(Output<GrantConstraintsArgs> constraints);
        public Builder retireOnDelete(Output<Boolean> retireOnDelete);
        public Builder grantCreationTokens(Output<List<String>> grantCreationTokens);

        public GrantArgs build();
    }
}