in modules/kms-keyring/src/arn_parsing.ts [187:211]
export function isMultiRegionAwsKmsIdentifier(kmsIdentifier: string): boolean {
//= compliance/framework/aws-kms/aws-kms-key-arn.txt#2.9
//# If the input starts with "arn:", this MUST return the output of
//# identifying an an AWS KMS multi-Region ARN (aws-kms-key-
//# arn.md#identifying-an-an-aws-kms-multi-region-arn) called with this
//# input.
if (kmsIdentifier.startsWith('arn:')) {
return isMultiRegionAwsKmsArn(kmsIdentifier)
} else if (kmsIdentifier.startsWith('alias/')) {
//= compliance/framework/aws-kms/aws-kms-key-arn.txt#2.9
//# If the input starts with "alias/", this an AWS KMS alias and
//# not a multi-Region key id and MUST return false.
return false
} else if (kmsIdentifier.startsWith(MRK_RESOURCE_ID_PREFIX)) {
//= compliance/framework/aws-kms/aws-kms-key-arn.txt#2.9
//# If the input starts
//# with "mrk-", this is a multi-Region key id and MUST return true.
return true
}
//= compliance/framework/aws-kms/aws-kms-key-arn.txt#2.9
//# If
//# the input does not start with any of the above, this is not a multi-
//# Region key id and MUST return false.
return false
}