Questions tagged with AWS Key Management Service
AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
I have an application deployed on on-prem server, is there a way to use only IAM role or policy to access AWS SDk. I dont want to provide or store the secret key and access key anywhere to access it....
AccessDeniedException - User: because no identity-based policy allows the kms:DescribeKey action
what key or policy should I allow to solve this error?
i am trying to solve the when i am trying to...
Hi there,
We lost administrative access to a KMS CMK. This is the result of a role being recreated I guess. The root user is not able to update the key policy either.
In this situation, I know the...
Hi,
IHAC that is looking for the encryption options for EBS volumes and wants to correlate with the options they used on other cloud platform as:
There are 3 options e when encrypting the disks of a...
asked a month ago
I built S2N-TLS with AWS libcrypto with PQ support as provided below. When I connect to KMS endpoint I need to choose a weird policy to have PQ cipers negotiated. How to connect over TLS 1.3 and PQ...
asked a month ago
IHAC who has an organizational requirement to rotate the KMS key every 6 months. Currently, they have auto-rotation enabled for a year. Additionally, in case of an incident they want to rotate the key...
asked a month ago
The cloudtrail event details i am giving below
Event name - RetireGrant
Event time - August 01, 2024, 03:30:22 (UTC+05:30)
User name - -
Event source - kms.amazonaws.com
Resource type -...
Hello
I accidentally created a CMK in another region that I'm not using with Terraform. However, when I attempt to delete the CMK using terraform destroy, it cannot be deleted. I have tried deleting...
asked a month ago
we need to exchange with an external organisation certificate and secrets to configure two different applications (hosted on different hyper scalers , one being AWS and other one Azure) with TLS...
I want to use AWS Payment Cryptography but i can figure out regarding the rotation are the keys rotated? if yes where it is being configured ?can i rotate it from net sdk? can i configure rotation in...
TL;DR: A new devops want to use the current EKS which encrypted using KMS, the IAM have administrator access which copied from the old devops guy.
I've joined a new company which have eks cluster, to...
Hi!
I'm wondering why i got charged for KMS while i don't have any API requests?
I don't event have any active services.
Could you please help check and clarify?
Thank you!