Skip to main content

KMS Key

AWS Key Management Service (KMS) Key is a critical component used to encrypt and decrypt data within AWS environments, providing an additional layer of protection for sensitive information. KMS keys are used to control access and manage permissions to encrypted data across AWS services and applications. For more details, refer to the official documentation here.

Terraform Mappings:

  • aws_kms_key.key_id

Supported Methods​

  • GET: Get a KMS Key by its ID
  • LIST: List all KMS Keys
  • SEARCH: Search for KMS Keys by ARN

kms-custom-key-store​

This item is related to the KMS Custom Key Store as it facilitates the creation and management of KMS keys within a custom key store, allowing for integration with external key management solutions and providing broader key management options alongside AWS-managed keys.

kms-key-policy​

The KMS Key Policy is directly associated with a KMS Key as it defines the permissions and controls who can manage or use the key. Adjusting key policies can help in enforcing specific security and compliance requirements.

kms-grant​

KMS Grants are linked to KMS Keys as they provide a method for applications to use keys without depending entirely on key policies. Grants offer temporary permissions to use and manage keys, enabling flexible and secure key usage across applications.