boundary/website/content/docs/configuration/kms/aead.mdx

---
layout: docs
page_title: KMS AEAD - Configuration
sidebar_title: KMS AEAD
description: |-
  The KMS AEAD configures KMS-specifc parameters.
---

```hcl
kms "aead" {
	purpose = "worker-auth"
	aead_type = "aes-gcm"
	key = "8fZBjCUfN0TzjEGLQldGY4+iE9AkOvCfjh7+p0GtRBQ="
	key_id = "global_worker-auth"
}
```

- `purpose` - Purpose of this KMS, acceptable values are: `worker-auth`, `root`, and `recovery`.

- `aead_type` - The type of encryption this KMS uses.

- `key` - Optional, a hard coded key if not using an external KMS.

- `key_id` - The unique name of this key.