AWS service detail

Choosing an AWS cryptography service

Cryptography & PKI

Choose the right AWS cryptography service

Cryptography & PKIProduction guidance

Production use

Use to protect keys, certificates, code signing, encryption, and trust boundaries.

Before production

  • Rotate keys/certs
  • separate duties
  • restrict key policies
  • log usage
  • test expiry handling
  • document recovery processes.