1 Answer
- Newest
- Most votes
- Most comments
2
Below may be the reasons that the AWS Account is being suspended:
- Account suspension: If an AWS account is suspended (for example, due to non-payment), access to all AWS services is blocked until the account is reinstated. This includes AWS Key Management Service (KMS).
- KMS keys: Customer-managed keys in AWS KMS are stored in FIPS 140-3 validated hardware security modules (HSMs). These keys never leave AWS KMS unencrypted, and you cannot export them. If your account is suspended, you lose the ability to call KMS APIs, meaning you cannot decrypt or sign data with those keys.
- No bypass: AWS documentation makes clear that there are no implicit or automatic permissions to use or manage a KMS key; all access requires valid AWS credentials and an active account. If the account is locked, the keys are effectively inaccessible until the suspension is lifted.
https://docs.aws.amazon.com/kms/latest/developearguide/overview.html
https://docs.aws.amazon.com/prescriptive-guidance/latest/aws-kms-best-practices/access.html
Relevant content
asked 2 years ago
