[Yandex Cloud documentation](../index.md) > Yandex Key Management Service > Key Management Service

# Yandex Key Management Service

Yandex Key Management Service helps you create and manage encryption keys that you can use to protect your data in the Yandex Cloud infrastructure and encrypt or decrypt any of your data.

This service is subject to a <a href="https://yandex.com/legal/cloud_sla">service level agreement</a>. The service level is set out in the document titled <a href="https://yandex.com/legal/cloud_sla_kms">Service level for Yandex Key Management Service</a>.

# Yandex Key Management Service

 - [Getting started](quickstart/index.md)

## Step-by-step guides

 - [All guides](operations/index.md)

### Symmetric encryption

 - [Key](operations/key.md)

 - [Key version](operations/version.md)

 - [Data encryption](operations/symmetric-encryption.md)

 - [Encryption key access permissions](operations/key-access.md)

### Asymmetric encryption

 - [Encryption key pair](operations/asymmetric-encryption-key.md)

 - [Data encryption](operations/asymmetric-encryption.md)

 - [Access permissions for an asymmetric key pair](operations/asymmetric-encryption-key-access.md)

### Digital signature

 - [Digital signature key pair](operations/asymmetric-signature-key.md)

 - [Access permissions for a digital signature key pair](operations/asymmetric-signature-key-access.md)

 - [Digital signature and its verification](operations/signature-verification.md)

 - [Digital signature of files and artifacts using Cosign](operations/signature-verification-cosign.md)

 - [Viewing operations on service resources](operations/operation-logs.md)

## Concepts

 - [Overview](concepts/index.md)

### Symmetric encryption

 - [Symmetric key](concepts/key.md)

 - [Key version](concepts/version.md)

 - [Symmetric encryption](concepts/symmetric-encryption.md)

 - [Hardware security module (HSM)](concepts/hsm.md)

### Asymmetric encryption

 - [Encryption key pair](concepts/asymmetric-encryption-key.md)

 - [Asymmetric encryption](concepts/asymmetric-encryption.md)

### Digital signature

 - [Digital signature key pair](concepts/asymmetric-signature-key.md)

 - [Digital signature](concepts/digital-signature.md)

 - [Envelope encryption](concepts/envelope.md)

 - [Key consistency](concepts/consistency.md)

 - [Quotas and limits](concepts/limits.md)

## Tutorials

 - [All tutorials](tutorials/index.md)

### Data encryption

 - [Which encryption method should I choose?](tutorials/encrypt/index.md)

 - [Encrypting data using the Yandex Cloud CLI and API](tutorials/encrypt/cli-api.md)

 - [Encrypting data using the Yandex Cloud SDK](tutorials/encrypt/sdk.md)

 - [Encrypting data using the AWS Encryption SDK](tutorials/encrypt/aws-encryption-sdk.md)

 - [Encrypting data using Google Tink](tutorials/encrypt/google-tink.md)

 - [Encrypting secrets in Managed Service for Kubernetes](tutorials/kms-k8s.md)

 - [Signing and verifying Docker images in Managed Service for Kubernetes](tutorials/sign-cr-with-cosign.md)

 - [Managing KMS keys with Hashicorp Terraform](tutorials/terraform-key.md)

 - [Encrypting secrets in Hashicorp Terraform](tutorials/terraform-secret.md)

 - [Auto Unseal in Hashicorp Vault](tutorials/vault-secret.md)

### Secure password transmission to an initialization script

 - [Overview](tutorials/secure-password-script/index.md)

 - [Management console, CLI, and API](tutorials/secure-password-script/console.md)

 - [Terraform](tutorials/secure-password-script/terraform.md)

 - [Server-side encryption for an Object Storage bucket](tutorials/server-side-encryption.md)

 - [Access management](security/index.md)

 - [Pricing policy](pricing.md)

## CLI reference

 - [Overview](cli-ref/index.md)

### asymmetric-encryption-crypto

 - [Overview](cli-ref/asymmetric-encryption-crypto/index.md)

 - [decrypt](cli-ref/asymmetric-encryption-crypto/decrypt.md)

 - [get-public-key](cli-ref/asymmetric-encryption-crypto/get-public-key.md)

### asymmetric-encryption-key

 - [Overview](cli-ref/asymmetric-encryption-key/index.md)

 - [add-access-binding](cli-ref/asymmetric-encryption-key/add-access-binding.md)

 - [create](cli-ref/asymmetric-encryption-key/create.md)

 - [delete](cli-ref/asymmetric-encryption-key/delete.md)

 - [get](cli-ref/asymmetric-encryption-key/get.md)

 - [list](cli-ref/asymmetric-encryption-key/list.md)

 - [list-access-bindings](cli-ref/asymmetric-encryption-key/list-access-bindings.md)

 - [list-operations](cli-ref/asymmetric-encryption-key/list-operations.md)

 - [remove-access-binding](cli-ref/asymmetric-encryption-key/remove-access-binding.md)

 - [set-access-bindings](cli-ref/asymmetric-encryption-key/set-access-bindings.md)

 - [update](cli-ref/asymmetric-encryption-key/update.md)

### asymmetric-signature-crypto

 - [Overview](cli-ref/asymmetric-signature-crypto/index.md)

 - [get-public-key](cli-ref/asymmetric-signature-crypto/get-public-key.md)

 - [sign](cli-ref/asymmetric-signature-crypto/sign.md)

 - [sign-hash](cli-ref/asymmetric-signature-crypto/sign-hash.md)

### asymmetric-signature-key

 - [Overview](cli-ref/asymmetric-signature-key/index.md)

 - [add-access-binding](cli-ref/asymmetric-signature-key/add-access-binding.md)

 - [create](cli-ref/asymmetric-signature-key/create.md)

 - [delete](cli-ref/asymmetric-signature-key/delete.md)

 - [get](cli-ref/asymmetric-signature-key/get.md)

 - [list](cli-ref/asymmetric-signature-key/list.md)

 - [list-access-bindings](cli-ref/asymmetric-signature-key/list-access-bindings.md)

 - [list-operations](cli-ref/asymmetric-signature-key/list-operations.md)

 - [remove-access-binding](cli-ref/asymmetric-signature-key/remove-access-binding.md)

 - [set-access-bindings](cli-ref/asymmetric-signature-key/set-access-bindings.md)

 - [update](cli-ref/asymmetric-signature-key/update.md)

### symmetric-crypto

 - [Overview](cli-ref/symmetric-crypto/index.md)

 - [decrypt](cli-ref/symmetric-crypto/decrypt.md)

 - [encrypt](cli-ref/symmetric-crypto/encrypt.md)

 - [generate-data-key](cli-ref/symmetric-crypto/generate-data-key.md)

 - [re-encrypt](cli-ref/symmetric-crypto/re-encrypt.md)

### symmetric-key

 - [Overview](cli-ref/symmetric-key/index.md)

 - [add-access-binding](cli-ref/symmetric-key/add-access-binding.md)

 - [cancel-version-destruction](cli-ref/symmetric-key/cancel-version-destruction.md)

 - [create](cli-ref/symmetric-key/create.md)

 - [delete](cli-ref/symmetric-key/delete.md)

 - [get](cli-ref/symmetric-key/get.md)

 - [list](cli-ref/symmetric-key/list.md)

 - [list-access-bindings](cli-ref/symmetric-key/list-access-bindings.md)

 - [list-operations](cli-ref/symmetric-key/list-operations.md)

 - [list-versions](cli-ref/symmetric-key/list-versions.md)

 - [remove-access-binding](cli-ref/symmetric-key/remove-access-binding.md)

 - [rotate](cli-ref/symmetric-key/rotate.md)

 - [schedule-version-destruction](cli-ref/symmetric-key/schedule-version-destruction.md)

 - [set-access-bindings](cli-ref/symmetric-key/set-access-bindings.md)

 - [set-primary-version](cli-ref/symmetric-key/set-primary-version.md)

 - [update](cli-ref/symmetric-key/update.md)

### v0

 - [Overview](cli-ref/v0/index.md)

#### asymmetric-encryption-crypto

 - [Overview](cli-ref/v0/asymmetric-encryption-crypto/index.md)

 - [decrypt](cli-ref/v0/asymmetric-encryption-crypto/decrypt.md)

 - [get-public-key](cli-ref/v0/asymmetric-encryption-crypto/get-public-key.md)

#### asymmetric-encryption-key

 - [Overview](cli-ref/v0/asymmetric-encryption-key/index.md)

 - [add-access-binding](cli-ref/v0/asymmetric-encryption-key/add-access-binding.md)

 - [create](cli-ref/v0/asymmetric-encryption-key/create.md)

 - [delete](cli-ref/v0/asymmetric-encryption-key/delete.md)

 - [get](cli-ref/v0/asymmetric-encryption-key/get.md)

 - [list](cli-ref/v0/asymmetric-encryption-key/list.md)

 - [list-access-bindings](cli-ref/v0/asymmetric-encryption-key/list-access-bindings.md)

 - [list-operations](cli-ref/v0/asymmetric-encryption-key/list-operations.md)

 - [remove-access-binding](cli-ref/v0/asymmetric-encryption-key/remove-access-binding.md)

 - [set-access-bindings](cli-ref/v0/asymmetric-encryption-key/set-access-bindings.md)

 - [update](cli-ref/v0/asymmetric-encryption-key/update.md)

#### asymmetric-signature-crypto

 - [Overview](cli-ref/v0/asymmetric-signature-crypto/index.md)

 - [get-public-key](cli-ref/v0/asymmetric-signature-crypto/get-public-key.md)

 - [sign](cli-ref/v0/asymmetric-signature-crypto/sign.md)

 - [sign-hash](cli-ref/v0/asymmetric-signature-crypto/sign-hash.md)

#### asymmetric-signature-key

 - [Overview](cli-ref/v0/asymmetric-signature-key/index.md)

 - [add-access-binding](cli-ref/v0/asymmetric-signature-key/add-access-binding.md)

 - [create](cli-ref/v0/asymmetric-signature-key/create.md)

 - [delete](cli-ref/v0/asymmetric-signature-key/delete.md)

 - [get](cli-ref/v0/asymmetric-signature-key/get.md)

 - [list](cli-ref/v0/asymmetric-signature-key/list.md)

 - [list-access-bindings](cli-ref/v0/asymmetric-signature-key/list-access-bindings.md)

 - [list-operations](cli-ref/v0/asymmetric-signature-key/list-operations.md)

 - [remove-access-binding](cli-ref/v0/asymmetric-signature-key/remove-access-binding.md)

 - [set-access-bindings](cli-ref/v0/asymmetric-signature-key/set-access-bindings.md)

 - [update](cli-ref/v0/asymmetric-signature-key/update.md)

#### symmetric-crypto

 - [Overview](cli-ref/v0/symmetric-crypto/index.md)

 - [decrypt](cli-ref/v0/symmetric-crypto/decrypt.md)

 - [encrypt](cli-ref/v0/symmetric-crypto/encrypt.md)

 - [generate-data-key](cli-ref/v0/symmetric-crypto/generate-data-key.md)

 - [re-encrypt](cli-ref/v0/symmetric-crypto/re-encrypt.md)

#### symmetric-key

 - [Overview](cli-ref/v0/symmetric-key/index.md)

 - [add-access-binding](cli-ref/v0/symmetric-key/add-access-binding.md)

 - [cancel-version-destruction](cli-ref/v0/symmetric-key/cancel-version-destruction.md)

 - [create](cli-ref/v0/symmetric-key/create.md)

 - [delete](cli-ref/v0/symmetric-key/delete.md)

 - [get](cli-ref/v0/symmetric-key/get.md)

 - [list](cli-ref/v0/symmetric-key/list.md)

 - [list-access-bindings](cli-ref/v0/symmetric-key/list-access-bindings.md)

 - [list-operations](cli-ref/v0/symmetric-key/list-operations.md)

 - [list-versions](cli-ref/v0/symmetric-key/list-versions.md)

 - [remove-access-binding](cli-ref/v0/symmetric-key/remove-access-binding.md)

 - [rotate](cli-ref/v0/symmetric-key/rotate.md)

 - [schedule-version-destruction](cli-ref/v0/symmetric-key/schedule-version-destruction.md)

 - [set-access-bindings](cli-ref/v0/symmetric-key/set-access-bindings.md)

 - [set-primary-version](cli-ref/v0/symmetric-key/set-primary-version.md)

 - [update](cli-ref/v0/symmetric-key/update.md)

 - [Terraform reference](tf-ref.md)

## API reference

 - [API authentication](api-ref/authentication.md)

### gRPC

 - [Overview](api-ref/grpc/index.md)

#### Operation

 - [Overview](api-ref/grpc/Operation/index.md)

 - [Get](api-ref/grpc/Operation/get.md)

 - [Cancel](api-ref/grpc/Operation/cancel.md)

#### SymmetricCrypto

 - [Overview](api-ref/grpc/SymmetricCrypto/index.md)

 - [Encrypt](api-ref/grpc/SymmetricCrypto/encrypt.md)

 - [Decrypt](api-ref/grpc/SymmetricCrypto/decrypt.md)

 - [ReEncrypt](api-ref/grpc/SymmetricCrypto/reEncrypt.md)

 - [GenerateDataKey](api-ref/grpc/SymmetricCrypto/generateDataKey.md)

#### SymmetricKey

 - [Overview](api-ref/grpc/SymmetricKey/index.md)

 - [Create](api-ref/grpc/SymmetricKey/create.md)

 - [Get](api-ref/grpc/SymmetricKey/get.md)

 - [List](api-ref/grpc/SymmetricKey/list.md)

 - [ListVersions](api-ref/grpc/SymmetricKey/listVersions.md)

 - [Update](api-ref/grpc/SymmetricKey/update.md)

 - [Delete](api-ref/grpc/SymmetricKey/delete.md)

 - [SetPrimaryVersion](api-ref/grpc/SymmetricKey/setPrimaryVersion.md)

 - [ScheduleVersionDestruction](api-ref/grpc/SymmetricKey/scheduleVersionDestruction.md)

 - [CancelVersionDestruction](api-ref/grpc/SymmetricKey/cancelVersionDestruction.md)

 - [Rotate](api-ref/grpc/SymmetricKey/rotate.md)

 - [ListOperations](api-ref/grpc/SymmetricKey/listOperations.md)

 - [ListAccessBindings](api-ref/grpc/SymmetricKey/listAccessBindings.md)

 - [SetAccessBindings](api-ref/grpc/SymmetricKey/setAccessBindings.md)

 - [UpdateAccessBindings](api-ref/grpc/SymmetricKey/updateAccessBindings.md)

#### Key Management Service API

 - [Overview](asymmetricencryption/api-ref/grpc/index.md)

##### AsymmetricEncryptionCrypto

 - [Overview](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionCrypto/index.md)

 - [Decrypt](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionCrypto/decrypt.md)

 - [GetPublicKey](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionCrypto/getPublicKey.md)

##### AsymmetricEncryptionKey

 - [Overview](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/index.md)

 - [Create](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/create.md)

 - [Get](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/get.md)

 - [List](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/list.md)

 - [Update](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/update.md)

 - [Delete](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/delete.md)

 - [ListOperations](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/listOperations.md)

 - [ListAccessBindings](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/listAccessBindings.md)

 - [SetAccessBindings](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/setAccessBindings.md)

 - [UpdateAccessBindings](asymmetricencryption/api-ref/grpc/AsymmetricEncryptionKey/updateAccessBindings.md)

##### Operation

 - [Overview](asymmetricencryption/api-ref/grpc/Operation/index.md)

 - [Get](asymmetricencryption/api-ref/grpc/Operation/get.md)

 - [Cancel](asymmetricencryption/api-ref/grpc/Operation/cancel.md)

#### Key Management Service API

 - [Overview](asymmetricsignature/api-ref/grpc/index.md)

##### AsymmetricSignatureCrypto

 - [Overview](asymmetricsignature/api-ref/grpc/AsymmetricSignatureCrypto/index.md)

 - [Sign](asymmetricsignature/api-ref/grpc/AsymmetricSignatureCrypto/sign.md)

 - [SignHash](asymmetricsignature/api-ref/grpc/AsymmetricSignatureCrypto/signHash.md)

 - [GetPublicKey](asymmetricsignature/api-ref/grpc/AsymmetricSignatureCrypto/getPublicKey.md)

##### AsymmetricSignatureKey

 - [Overview](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/index.md)

 - [Create](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/create.md)

 - [Get](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/get.md)

 - [List](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/list.md)

 - [Update](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/update.md)

 - [Delete](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/delete.md)

 - [ListOperations](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/listOperations.md)

 - [ListAccessBindings](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/listAccessBindings.md)

 - [SetAccessBindings](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/setAccessBindings.md)

 - [UpdateAccessBindings](asymmetricsignature/api-ref/grpc/AsymmetricSignatureKey/updateAccessBindings.md)

##### Operation

 - [Overview](asymmetricsignature/api-ref/grpc/Operation/index.md)

 - [Get](asymmetricsignature/api-ref/grpc/Operation/get.md)

 - [Cancel](asymmetricsignature/api-ref/grpc/Operation/cancel.md)

### REST

 - [Overview](api-ref/index.md)

#### Operation

 - [Overview](api-ref/Operation/index.md)

 - [Get](api-ref/Operation/get.md)

 - [Cancel](api-ref/Operation/cancel.md)

#### SymmetricCrypto

 - [Overview](api-ref/SymmetricCrypto/index.md)

 - [Encrypt](api-ref/SymmetricCrypto/encrypt.md)

 - [Decrypt](api-ref/SymmetricCrypto/decrypt.md)

 - [ReEncrypt](api-ref/SymmetricCrypto/reEncrypt.md)

 - [GenerateDataKey](api-ref/SymmetricCrypto/generateDataKey.md)

#### SymmetricKey

 - [Overview](api-ref/SymmetricKey/index.md)

 - [Create](api-ref/SymmetricKey/create.md)

 - [Get](api-ref/SymmetricKey/get.md)

 - [List](api-ref/SymmetricKey/list.md)

 - [ListVersions](api-ref/SymmetricKey/listVersions.md)

 - [Update](api-ref/SymmetricKey/update.md)

 - [Delete](api-ref/SymmetricKey/delete.md)

 - [SetPrimaryVersion](api-ref/SymmetricKey/setPrimaryVersion.md)

 - [ScheduleVersionDestruction](api-ref/SymmetricKey/scheduleVersionDestruction.md)

 - [CancelVersionDestruction](api-ref/SymmetricKey/cancelVersionDestruction.md)

 - [Rotate](api-ref/SymmetricKey/rotate.md)

 - [ListOperations](api-ref/SymmetricKey/listOperations.md)

 - [ListAccessBindings](api-ref/SymmetricKey/listAccessBindings.md)

 - [SetAccessBindings](api-ref/SymmetricKey/setAccessBindings.md)

 - [UpdateAccessBindings](api-ref/SymmetricKey/updateAccessBindings.md)

#### Key Management Service API

 - [Overview](asymmetricencryption/api-ref/index.md)

##### AsymmetricEncryptionCrypto

 - [Overview](asymmetricencryption/api-ref/AsymmetricEncryptionCrypto/index.md)

 - [Decrypt](asymmetricencryption/api-ref/AsymmetricEncryptionCrypto/decrypt.md)

 - [GetPublicKey](asymmetricencryption/api-ref/AsymmetricEncryptionCrypto/getPublicKey.md)

##### AsymmetricEncryptionKey

 - [Overview](asymmetricencryption/api-ref/AsymmetricEncryptionKey/index.md)

 - [Create](asymmetricencryption/api-ref/AsymmetricEncryptionKey/create.md)

 - [Get](asymmetricencryption/api-ref/AsymmetricEncryptionKey/get.md)

 - [List](asymmetricencryption/api-ref/AsymmetricEncryptionKey/list.md)

 - [Update](asymmetricencryption/api-ref/AsymmetricEncryptionKey/update.md)

 - [Delete](asymmetricencryption/api-ref/AsymmetricEncryptionKey/delete.md)

 - [ListOperations](asymmetricencryption/api-ref/AsymmetricEncryptionKey/listOperations.md)

 - [ListAccessBindings](asymmetricencryption/api-ref/AsymmetricEncryptionKey/listAccessBindings.md)

 - [SetAccessBindings](asymmetricencryption/api-ref/AsymmetricEncryptionKey/setAccessBindings.md)

 - [UpdateAccessBindings](asymmetricencryption/api-ref/AsymmetricEncryptionKey/updateAccessBindings.md)

##### Operation

 - [Overview](asymmetricencryption/api-ref/Operation/index.md)

 - [Get](asymmetricencryption/api-ref/Operation/get.md)

 - [Cancel](asymmetricencryption/api-ref/Operation/cancel.md)

#### Key Management Service API

 - [Overview](asymmetricsignature/api-ref/index.md)

##### AsymmetricSignatureCrypto

 - [Overview](asymmetricsignature/api-ref/AsymmetricSignatureCrypto/index.md)

 - [Sign](asymmetricsignature/api-ref/AsymmetricSignatureCrypto/sign.md)

 - [SignHash](asymmetricsignature/api-ref/AsymmetricSignatureCrypto/signHash.md)

 - [GetPublicKey](asymmetricsignature/api-ref/AsymmetricSignatureCrypto/getPublicKey.md)

##### AsymmetricSignatureKey

 - [Overview](asymmetricsignature/api-ref/AsymmetricSignatureKey/index.md)

 - [Create](asymmetricsignature/api-ref/AsymmetricSignatureKey/create.md)

 - [Get](asymmetricsignature/api-ref/AsymmetricSignatureKey/get.md)

 - [List](asymmetricsignature/api-ref/AsymmetricSignatureKey/list.md)

 - [Update](asymmetricsignature/api-ref/AsymmetricSignatureKey/update.md)

 - [Delete](asymmetricsignature/api-ref/AsymmetricSignatureKey/delete.md)

 - [ListOperations](asymmetricsignature/api-ref/AsymmetricSignatureKey/listOperations.md)

 - [ListAccessBindings](asymmetricsignature/api-ref/AsymmetricSignatureKey/listAccessBindings.md)

 - [SetAccessBindings](asymmetricsignature/api-ref/AsymmetricSignatureKey/setAccessBindings.md)

 - [UpdateAccessBindings](asymmetricsignature/api-ref/AsymmetricSignatureKey/updateAccessBindings.md)

##### Operation

 - [Overview](asymmetricsignature/api-ref/Operation/index.md)

 - [Get](asymmetricsignature/api-ref/Operation/get.md)

 - [Cancel](asymmetricsignature/api-ref/Operation/cancel.md)

 - [Monitoring metrics](metrics.md)

 - [Audit Trails events](at-ref.md)

 - [FAQ](qa/index.md)