By using AWS re:Post, you agree to the Terms of Use

How to enable FIPS endpoint on govcloud KMS?

0

Documentation here (https://docs.aws.amazon.com/kms/latest/APIReference/Welcome.html) says 'use FIPS endpoint for your region', but I can't find any information on how to configure or enable it. I'm using this on gov cloud region. Is the FIPS endpoint just there and auto-provisioned like an alias for any service? If there is something needed in the CLI could you kindly provide the syntax?

2 Answers
0
profile picture
EXPERT
answered 7 months ago
0

Here is an example of specifying the FIPS endpoint on the CLI: . aws appstream describe-stacks --endpoint-url https://appstream2-fips.us-west-2.amazonaws.com. Associated documentation.

It is also possible to configure the SDK for FIPS endpoint usage: https://docs.aws.amazon.com/sdk-for-go/api/aws/session/

To configure a FIPS endpoint set the environment variable set the AWS_USE_FIPS_ENDPOINT to true or false to enable or disable FIPS endpoint resolution.

AWS_USE_FIPS_ENDPOINT=true
To configure a FIPS endpoint using shared config, set use_fips_endpoint to true or false to enable or disable FIPS endpoint resolution.

[profile myprofile]
region=us-west-2
use_fips_endpoint=true
answered 7 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions