AWS Key Management Service (KMS) is a scalable encryption and key management service provided by Amazon. As the name suggests, KMS can be used for encrypting data and managing encryption keys. This chapter introduces you to KMS and explains how you can use it with other AWS services. However, before we get into the details of this chapter, it is important to understand some of the basics of encryption.
We will cover the following topics in this chapter:
- Introducing encryption
- How KMS works
- Types of keys
- Creating a Customer Master Key (CMK)
- Updating the administrators or the users of a key
- Tagging a key
- Enabling or disabling keys
- Using KMS with other AWS services