# Generated by default/object.tt package Paws::KMS::CustomKeyStoresListEntry; use Moose; has CloudHsmClusterId => (is => 'ro', isa => 'Str'); has ConnectionErrorCode => (is => 'ro', isa => 'Str'); has ConnectionState => (is => 'ro', isa => 'Str'); has CreationDate => (is => 'ro', isa => 'Str'); has CustomKeyStoreId => (is => 'ro', isa => 'Str'); has CustomKeyStoreName => (is => 'ro', isa => 'Str'); has TrustAnchorCertificate => (is => 'ro', isa => 'Str'); 1; ### main pod documentation begin ### =head1 NAME Paws::KMS::CustomKeyStoresListEntry =head1 USAGE This class represents one of two things: =head3 Arguments in a call to a service Use the attributes of this class as arguments to methods. You shouldn't make instances of this class. Each attribute should be used as a named argument in the calls that expect this type of object. As an example, if Att1 is expected to be a Paws::KMS::CustomKeyStoresListEntry object: $service_obj->Method(Att1 => { CloudHsmClusterId => $value, ..., TrustAnchorCertificate => $value }); =head3 Results returned from an API call Use accessors for each attribute. If Att1 is expected to be an Paws::KMS::CustomKeyStoresListEntry object: $result = $service_obj->Method(...); $result->Att1->CloudHsmClusterId =head1 DESCRIPTION Contains information about each custom key store in the custom key store list. =head1 ATTRIBUTES =head2 CloudHsmClusterId => Str A unique identifier for the AWS CloudHSM cluster that is associated with the custom key store. =head2 ConnectionErrorCode => Str Describes the connection error. This field appears in the response only when the C is C. For help resolving these errors, see How to Fix a Connection Failure (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#fix-keystore-failed) in I. Valid values are: =over =item * C - AWS KMS cannot find the AWS CloudHSM cluster with the specified cluster ID. =item * C - The associated AWS CloudHSM cluster does not contain any active HSMs. To connect a custom key store to its AWS CloudHSM cluster, the cluster must contain at least one active HSM. =item * C - AWS KMS could not complete the request due to an internal error. Retry the request. For C requests, disconnect the custom key store before trying to connect again. =item * C - AWS KMS does not have the correct password for the C crypto user in the AWS CloudHSM cluster. Before you can connect your custom key store to its AWS CloudHSM cluster, you must change the C account password and update the key store password value for the custom key store. =item * C - Network errors are preventing AWS KMS from connecting to the custom key store. =item * C - A subnet in the AWS CloudHSM cluster configuration was deleted. If AWS KMS cannot find all of the subnets in the cluster configuration, attempts to connect the custom key store to the AWS CloudHSM cluster fail. To fix this error, create a cluster from a recent backup and associate it with your custom key store. (This process creates a new cluster configuration with a VPC and private subnets.) For details, see How to Fix a Connection Failure (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#fix-keystore-failed) in the I. =item * C - The C CU account is locked out of the associated AWS CloudHSM cluster due to too many failed password attempts. Before you can connect your custom key store to its AWS CloudHSM cluster, you must change the C account password and update the key store password value for the custom key store. =item * C - The C CU account is logged into the the associated AWS CloudHSM cluster. This prevents AWS KMS from rotating the C account password and logging into the cluster. Before you can connect your custom key store to its AWS CloudHSM cluster, you must log the C CU out of the cluster. If you changed the C password to log into the cluster, you must also and update the key store password value for the custom key store. For help, see How to Log Out and Reconnect (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html#login-kmsuser-2) in the I. =item * C - AWS KMS cannot find a C CU account in the associated AWS CloudHSM cluster. Before you can connect your custom key store to its AWS CloudHSM cluster, you must create a C CU account in the cluster, and then update the key store password value for the custom key store. =back =head2 ConnectionState => Str Indicates whether the custom key store is connected to its AWS CloudHSM cluster. You can create and use CMKs in your custom key stores only when its connection state is C. The value is C if the key store has never been connected or you use the DisconnectCustomKeyStore operation to disconnect it. If the value is C but you are having trouble using the custom key store, make sure that its associated AWS CloudHSM cluster is active and contains at least one active HSM. A value of C indicates that an attempt to connect was unsuccessful. The C field in the response indicates the cause of the failure. For help resolving a connection failure, see Troubleshooting a Custom Key Store (https://docs.aws.amazon.com/kms/latest/developerguide/fix-keystore.html) in the I. =head2 CreationDate => Str The date and time when the custom key store was created. =head2 CustomKeyStoreId => Str A unique identifier for the custom key store. =head2 CustomKeyStoreName => Str The user-specified friendly name for the custom key store. =head2 TrustAnchorCertificate => Str The trust anchor certificate of the associated AWS CloudHSM cluster. When you initialize the cluster (https://docs.aws.amazon.com/cloudhsm/latest/userguide/initialize-cluster.html#sign-csr), you create this certificate and save it in the C file. =head1 SEE ALSO This class forms part of L, describing an object used in L =head1 BUGS and CONTRIBUTIONS The source code is located here: L Please report bugs to: L =cut