Non-Insurance APIs:
Pre-Integrated Third-Party Services
for Insurance Transactions

Verify MFA Email

Verify MFA SMS

Send Voice

Process OCR with JSON content or URL

Delete object

Complete multipart upload

Check object existence

Put object

List objects

Delete object tags

Upload part

Get object metadata

Gets a list of all KMS keys in the caller's tenant, and does not return keys in other tenants.

Deletes the key.

All aliases associated with the key will be deleted.

Provides detailed information about a KMS key.

Gets a list of aliases in the caller's tenant, and does not return aliases in other tenants.

By default, returns all aliases in the tenant. To get only the aliases associated with a particular destination resource like a key or a secret, use the dest_type and dest_resource parameter.

Creates a friendly name for a destination resource. Each alias is associated with only one resource at a time, but a resource can have multiple aliases. A valid resource is required. You can't create an alias without resource.

The alias name must be unique in the tenant.

Supports below destination types:

key associated with a kms key, destination resource is the key id or key irn like 1234abcd-12ab-34cd-56ef-1234567890ab or res:mytenant:key/1234abcd-12ab-34cd-56ef-1234567890ab

Modifies the details of a secret, including metadata and the secret value.

Retrieves the details of a secret. It does not include the encrypted secret value.

Lists the secrets that are stored in your tenant.

Deletes a secret.

All aliases associated with the secret will be deleted.

Returns a unique symmetric data key for use outside the kms service.

This operation returns a plain copy of the data key and a copy that is encrypted under a symmetric encryption key that you specify.

The bytes in the plaintext key are random; they are not related to the caller or the key. You can use the plain key to encrypt your data outside kms service and store the encrypted data key with the encrypted data.

You must also specify the length of the data key. To generate an AES_256 data key, set the key length to 256 bits.

Encrypts plain data of up to 2048 bytes using a key or an alias, include the alias associated with aws KMS key.

You can use this operation to encrypt small amounts of arbitrary data, such as a personal identifier or database password, or other sensitive information.

The parameter PlainText in request body and CipherText in response body are both base64-encoded string. Otherwise, it fails.

You don't need to use the Encrypt operation to encrypt a data key. The Generate Data Key api return a plain

Generates a hash-based message authentication code (HMAC) for a message using an HMAC KMS key and a MAC algorithm that the key supports.

You can use value that GenerateMac returns in the VerifyMac API to demonstrate that the original message has not changed.

Also, because a secret key is used to create the hash, you can verify that the party that generated the hash has the required secret key. You can also use the raw result to implement HMAC-based algorithms such as key derivation functions.