What Is AWS KMS(Key Management Service) And Its Features

You have control over the cryptographic keys that are used to safeguard your data with AWS Key Management Service (KMS)

[{"selector":"#anim-d40d8b46-6215-45f4-b128-c1c3a3d2e0c8","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-5db7564b-bdd9-45a2-830c-5e3159c87f77","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Every request you make to AWS KMS is documented in a log file if your AWS account has AWS CloudTrail enabled

[{"selector":"#anim-6ff21a02-cba6-4009-be11-f510dbb66029 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-8e0c8490-d5d7-42cb-b980-8d4224f5c13e","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-83f25feb-4310-46a5-a530-075899599ee0","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Because of its integration with other AWS services, it is simpler to encrypt data stored in these services and manage who has access to the decryption keys

[{"selector":"#anim-87d96043-246b-4300-9b50-c2ca87e6197b [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-6e1c26aa-5341-48b8-850b-8ed13664b796","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-74e5b828-1a88-44f3-bb67-c0a193decf85","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

One completely managed service is AWS KMS. The solution adapts to your demands automatically as your encryption usage increases

[{"selector":"#anim-d83deb5e-6679-4b40-b7f7-e141ba522ceb [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-c2f4438f-4467-4728-8eaf-825699a507c6","keyframes":{"transform":["translate3d(115.55555%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-331f8a25-1341-435e-9c39-91a80abd8975","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c17f9262-07d6-400e-88e1-96f6076cda4e","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

The Amazon Simple Storage Service (Amazon S3) bucket that you designated when you configured AWS CloudTrail receives this log file

[{"selector":"#anim-a8c76492-fa8e-4a8c-b718-2c097f224c75 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-467ac3bd-8cc6-4088-acbb-35a02af8a37d","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-e10a0d58-231f-424b-8289-dedb903e158c","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Hash-Based Message Authentication Codes (HMACs) can be generated and validated from within AWS KMS‘s FIPS 140-2 approved HSMs

[{"selector":"#anim-31cc56d5-30b3-417f-83f4-e7639cb0ac79 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-07597bac-c52c-475b-b0b6-675e06c67744","keyframes":{"transform":["translate3d(115.23810%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-51c2ad51-b6f5-4ea6-90ea-6690d74cfc01","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0b1e6b84-7d9c-4eee-9b44-dbe948d12a12","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Data can be protected directly within your AWS application or in hybrid and multicloud environments by using AWS KMS with client-side encryption libraries

[{"selector":"#anim-5dd595fd-ec07-4196-8135-4bcee3af4c1b [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-0b5f8d16-4afa-446f-bb3b-d9e79ed3e6de","keyframes":{"transform":["translate3d(-115.55555%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a2856bcb-4ad1-43b1-8c55-6db2fea79c76","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8efd02ce-7a00-40f1-8951-f847dfcc0c2c","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]