Questions tagged with AWS Key Management Service
AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
We have been running with DMS obtaining access to Target Endpoints (RDS SQL Server) via Secrets Manager in all environments for over a year without issue. We have a character exclusion mechanism on...
asked 4 months ago
I am being charged for AWS managed keys. These keys are not used. And the documentation says I don't have the right to delete them.
I don't want to pay for the service that I don't use.
Please ask the...
I received an email from one of our customers regarding their international locations where they are running databases on IaaS. Currently, they are storing the Transparent Data Encryption (TDE)...
asked 5 months ago
I'm sending files by specifying the SSEKMSKeyId using the PHP code below:
$response = self::$s3Client->putObject([
'Bucket' => $bucket,
'Key' => $fileName,
...
Recently our team started looking into AWS CloudHSM to handle a custom workload where for regulatory reasons we need to ensure we meet all FIPS 140-2 level 3 requirements.
We have been very...
asked 5 months ago
I created a Customer Managed Key (CMK) without specifying Key Administrators or Key User policies. However, I noticed that I can still attach this KMS-CMK to EBS volumes and perform read-write...
Hello ! I'm having trouble setting the KMS Key policy via CDK code, here's how I'm dealing with it so far.
First, I create a KMS Key in a stack and then use the "**new cdk. CfnOutput**" to export...
Hello AWS,
I am trying to disable and delete customer managed keys from the console i am getting AccessDeniedException Error. I even created user with required permissions but still the issue...
I have only recently noticed that when you go into create an S3 bucket and select SSE-KMS it allows you to choose the default S3 KMS key or use your own KMS key. Unless I am mistaken, the default S3...
Use AWS CDK to create an EBS volume, configure KMS encryption, and use a KMS key managed by AWS,Key Alias: aws/ebs.
When I deploy it in a region where I haven't used EBS services before, I get error...
I'm creating my structure using CloudFormation but I'm stuck with an error that doesn't make sense.
To summarize, I'm creating a KMS Key and using it in the Stack itself to configure a Postgres...
Team, I have a use case to make an S3 bucket public that is encrypted with Customer Managed Key. For private buckets, we grant the principals access to the Key in KMS service, but how do i grant...