Skip to content

Commit 99138f2

Browse files
Y0CossY0Coss
authored
Merge pull request #7837 from ovh/dev/gbarideau/kms-kmip-iam-rights
Adding KMIP IAM rights
2 parents 3f93da4 + 6810e7c commit 99138f2

15 files changed

+450
-15
lines changed

‎pages/manage_and_operate/kms/kms-kmip/guide.de-de.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-asia.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-au.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-ca.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-gb.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-ie.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-sg.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

‎pages/manage_and_operate/kms/kms-kmip/guide.en-us.md

Lines changed: 30 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: "How to connect a compatible product using KMIP protocol"
33
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
4-
updated: 2025-03-03
4+
updated: 2025-05-12
55
---
66

77
## Objective
@@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De
4949

5050
You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>
5151

52+
### IAM Rights
53+
54+
KMIP operations with IAM users need specific authorisations as described below:
55+
56+
| KMIP Operation | Description | Action |
57+
| -------------- | ----------- | ------ |
58+
| Create | Create managed object | okms:kmip:create |
59+
| Get | Get managed object | okms:kmip:get |
60+
| Register | Register managed object| okms:kmip:register |
61+
| Activate | Activate managed object | okms:kmip:activate |
62+
| Revoke | Revoke managed object | okms:kmip:revoke |
63+
| Destroy | Destroy managed object | okms:kmip:destroy |
64+
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
65+
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
66+
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
67+
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
68+
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
69+
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
70+
| Locate | Locate managed object | okms:kmip:locate |
71+
| Archive | Archive managed object | okms:kmip:archive |
72+
| Recover | Recover managed object | okms:kmip:recover |
73+
| ReKey | Rekey managed object | okms:kmip:rekey |
74+
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
75+
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
76+
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
77+
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
78+
| Sign | Sign with managed object | okms:kmip:sign |
79+
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |
80+
5281
### KMIP coverage
5382

5483
The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.

0 commit comments

Comments
 (0)