This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 8, 2026.

AwsKms resources in ASFF

The following are examples of the AWS Security Finding Format (ASFF) syntax for AwsKms resources.

AWS Security Hub CSPM normalizes findings from various sources into ASFF. For background information about ASFF, see AWS Security Finding Format (ASFF).

AwsKmsKey

The AwsKmsKey object provides details about an AWS KMS key.

The following example shows the AWS Security Finding Format (ASFF) for the AwsKmsKey object. To view descriptions of AwsKmsKey attributes, see AwsKmsKeyDetails in the AWS Security Hub API Reference.

Example

"AwsKmsKey": {
                        "AWSAccountId": "string",
                        "CreationDate": "string",
                        "Description": "string",
                        "KeyId": "string",
                        "KeyManager": "string",
                        "KeyRotationStatus": boolean,
                        "KeyState": "string",
                        "Origin": "string"
                    }