What is KMS Key Material?

0

I'm looking to import my own keys into KMS and I see there is KMS Key Materials, what exactly is this?

3 Answers
1
Accepted Answer

Key material is the string of bits used in a cryptographic algorithm. Secret key material must be kept secret to protect the cryptographic operations that use it. Public key material is designed to be shared.

Each KMS key includes a reference to its key material in its metadata. The key material origin of symmetric encryption KMS keys can vary. You can use key material that AWS KMS generates, key material that is generated in the AWS CloudHSM cluster of a custom key store, or import your own key material. If you use AWS KMS key material for your symmetric encryption KMS key, you can enable automatic rotation of your key material.

By default, each KMS key has unique key material. However, you can create a set of multi-Region keys with the same key material.

https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-material

Documentation on how to import Key Material into KMS: https://docs.aws.amazon.com/kms/latest/developerguide/importing-keys.html

AWS
answered 9 months ago
0

Key material is the string of bits used in a cryptographic algorithm. Much more extensive detail about it can be found here https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-material

profile picture
EXPERT
Steve_M
answered 9 months ago
0

Key material:

    Key material is the string of bits used in a cryptographic algorithm. Secret key material must be kept secret to protect the cryptographic operations that use it. Public key material is designed to be shared.

Detailed description is available at What is Key Material

Here is how you'd create AWS KMS Key with you own key material: Importing key material steps

General documentation: Importing key material for AWS KMS keys

You may find this Knowledge Center Article for step by step guide.

Hope you find this useful.

Abhishek

profile pictureAWS
EXPERT
answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions