From the course: Complete Guide to AWS Security and Compliance Management

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Understanding Key Management Service

Understanding Key Management Service - Amazon Web Services (AWS) Tutorial

From the course: Complete Guide to AWS Security and Compliance Management

Start my 1-month free trial Buy for my team

Understanding Key Management Service

“

- [Instructor] Key Management Service, or KMS, is one of the foundational tools that AWS provides to create and manage encryption keys. Let's explore some of the key, no pun intended, KMS concepts. First off, KMS uses hardware security modules to keep your keys safe. From a hardware perspective, the underlying hardware security modules are multi-tenant. They're also compliant with the Federal Information Processing Standard, or FIPS 140-2, U.S. government security standard, which approves cryptographic modules. Changes related to keys are logged in CloudTrail. This will make your life easier from an audit and compliance perspective. Instead of having keys scattered across your organization, KMS allows for centralized management of your encryption keys. KMS supports both symmetric and asymmetric keys for encryption. Whether you want to generate your own keys or want AWS to handle the key generation for you, both options are possible using KMS. As you would expect, KMS integrates with…

Contents