public java.util.List<Tag> getTags() {
        if (tags == null) {
            tags = new com.amazonaws.internal.SdkInternalList<Tag>();
        }
        return tags;
    }
<p>
Assigns one or more tags to the KMS key. Use this parameter to tag the KMS key when it is created. To tag an
existing KMS key, use the <a>TagResource</a> operation.
</p>
<important>
<p>
Do not include confidential or sensitive information in this field. This field may be displayed in plaintext in
CloudTrail logs and other output.
</p>
</important> <note>
<p>
Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see <a
href="https://docs.aws.amazon.com/kms/latest/developerguide/abac.html">ABAC for KMS</a> in the <i>Key Management
Service Developer Guide</i>.
</p>
</note>
<p>
To use this parameter, you must have <a
href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html"
>kms:TagResource</a> permission in an IAM policy.
</p>
<p>
Each tag consists of a tag key and a tag value. Both the tag key and the tag value are required, but the tag
value can be an empty (null) string. You cannot have more than one tag on a KMS key with the same tag key. If you
specify an existing tag key with a different tag value, KMS replaces the current tag value with the specified
one.
</p>
<p>
When you add tags to an Amazon Web Services resource, Amazon Web Services generates a cost allocation report with
usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For details, see <a
href="https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html">Tagging Keys</a>.
</p>

@return Assigns one or more tags to the KMS key. Use this parameter to tag the KMS key when it is created. To tag
        an existing KMS key, use the <a>TagResource</a> operation.</p> <important>
        <p>
        Do not include confidential or sensitive information in this field. This field may be displayed in
        plaintext in CloudTrail logs and other output.
        </p>
        </important> <note>
        <p>
        Tagging or untagging a KMS key can allow or deny permission to the KMS key. For details, see <a
        href="https://docs.aws.amazon.com/kms/latest/developerguide/abac.html">ABAC for KMS</a> in the <i>Key
        Management Service Developer Guide</i>.
        </p>
        </note>
        <p>
        To use this parameter, you must have <a
        href="https://docs.aws.amazon.com/kms/latest/developerguide/kms-api-permissions-reference.html"
        >kms:TagResource</a> permission in an IAM policy.
        </p>
        <p>
        Each tag consists of a tag key and a tag value. Both the tag key and the tag value are required, but the
        tag value can be an empty (null) string. You cannot have more than one tag on a KMS key with the same tag
        key. If you specify an existing tag key with a different tag value, KMS replaces the current tag value
        with the specified one.
        </p>
        <p>
        When you add tags to an Amazon Web Services resource, Amazon Web Services generates a cost allocation
        report with usage and costs aggregated by tags. Tags can also be used to control access to a KMS key. For
        details, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/tagging-keys.html">Tagging
        Keys</a>.
aws-java-sdk-kms/src/main/java/com/amazonaws/services/kms/model/CreateKeyRequest.java