This message was deleted.

Hi, I don't think, it might return multiple ones. I can recommend to use AWS SDK instead (or combine results with pulumi).

I looked into it further, I guess it is because the kms API itself doesn’t allow for pulling via only tags… you have to know the ID 😕 I guess this makes sense on why the terraform provider never had it either. One would have to pull down all KMS’s with the list-keys API and do a client-side filter which seems inefficient since it’s a pagination operation (assuming you have a lot of keys I guess).