KMS key High Usage

Question

Hi,
In AWS account as i can see there is huge cost of Customer master key. How do I find which CMK key is getting high cost  as i can see all CMK keys  are enable and how can we reduce the cost

Regards
Harry

Accepted Answer

Does your account make heavy usage of KMS encryption for S3 buckets?  If so, you may want to explore the use of [bucket keys to reduce cost](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-key.html).

In terms of monitoring your KMS keys you can monitor your keys with both [CloudWatch and CloudTrail](https://docs.aws.amazon.com/kms/latest/developerguide/monitoring-overview.html).  In order to get per-key usage stats, you would most likely need to parse the CloudTrail log data further.

KMS key High Usage

Contenido relevante