You can create a CMK by using the AWS console and the KMS API. The following steps describe the process for creating a CMK using the AWS console:
- Log in to your AWS account and navigate to the KMS console at https://console.aws.amazon.com/kms.
- KMS is region-specific service; this means that a key that is created in one region can't be used in another region. Ensure that you have selected the right region and then click on Customer managed keys, as shown in the following screenshot:
Figure 18.4: Creating Customer managed keys
- From the subsequent screen, click on the Create key button.
- After clicking on the button, it displays a screen, as shown in Figure 18.5. You can enter the alias name and description of the key as required and click on the Next button:
Figure 18.5: Creating a key alias and description
Remember that you can't use the aws prefix...