AWS service detail

AWS Key Management Service

Cryptography & PKI

Managed creation and control of encryption keys

Cryptography & PKIProduction guidance

Production use

Manage encryption keys used by storage, databases, logs, and apps.

Before production

  • Use customer-managed keys where needed
  • key policies
  • rotation
  • grants
  • usage logs
  • separation of duties.