By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

All Content tagged with AWS Key Management Service

AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.

Content language: English

Select up to 5 tags to filter
Sort by most recent

Securing Your Cloud Infrastructure

profile picture
kranthi putti
EXPERT
published 7 hours ago0 votes14 views
Best Practices from a DevOps and AWS Perspective
ARTICLE
AWS Key Management ServiceAWS Secrets ManagerSecurityAmazon CloudWatch Internet MonitorKubernetes

Problem copying the restorepoints from backup vaults

There are two aws accounts 222222222222 , 777777777777 & are inside organization. I need to copy restore points from backup vault in 222222222222 to vault in 777777777777 using lambda function in...
AWS Key Management ServiceAWS LambdaAWS IAM Identity Center
0
answers
0
votes
13
views
profile picture
gravatar
asked 3 days ago

Accessing AWS SDK from on-prem server without secret key and access key

I have an application deployed on on-prem server, is there a way to use only IAM role or policy to access AWS SDk. I dont want to provide or store the secret key and access key anywhere to access it....
AWS Key Management ServiceSecurity, Identity, & ComplianceAWS Identity and Access ManagementSecurityIAM Policies
2
answers
0
votes
42
views
Braj
asked 7 days ago

When I start my Amazon EC2 instance that has encrypted volumes attached, why do I get the "client error on launch" error?

AWS OFFICIAL
AWS OFFICIALUpdated 15 days ago
I launched an Amazon Elastic Compute Cloud (Amazon EC2) instance that has encrypted volumes attached, but the instance doesn't start.
KNOWLEDGE CENTER
AWS Key Management Service

Access denied in AWS aurora (RDS database)

AccessDeniedException - User: because no identity-based policy allows the kms:DescribeKey action what key or policy should I allow to solve this error? i am trying to solve the when i am trying to...
AWS Key Management Service
1
answers
0
votes
27
views
philip
asked 18 days ago

Unable to delete KMS CMK nor to open a support case

Hi there, We lost administrative access to a KMS CMK. This is the result of a role being recreated I guess. The root user is not able to update the key policy either. In this situation, I know the...
Accepted AnswerAWS Key Management ServiceSupport CaseAccount Support
4
answers
0
votes
67
views
Matthieu Michaud
asked 23 days ago

Encryption options for EBS

Hi, IHAC that is looking for the encryption options for EBS volumes and wants to correlate with the options they used on other cloud platform as: There are 3 options e when encrypting the disks of a...
Accepted AnswerAWS Key Management ServiceSecurity, Identity, & ComplianceStorageSecurityEncryption
1
answers
0
votes
298
views
AWS
kizanlik
asked a month ago

Building S2N-TLS with AWS libcrypto with PQ support

I built S2N-TLS with AWS libcrypto with PQ support as provided below. When I connect to KMS endpoint I need to choose a weird policy to have PQ cipers negotiated. How to connect over TLS 1.3 and PQ...
Accepted AnswerAWS Key Management ServiceSecurity, Identity, & Compliance
2
answers
0
votes
138
views
AWS
AWS-User-9919996
asked a month ago

5 Best Practices for Securing Your AWS Environment

profile picture
kranthi putti
EXPERT
published a month ago0 votes581 views
Top 5 Best Practices for Securing Your AWS Environment
ARTICLE
Amazon VPCAWS Key Management ServiceAmazon CloudWatchAWS IAM Identity CenterMonitoring

KMS Key Rotation

IHAC who has an organizational requirement to rotate the KMS key every 6 months. Currently, they have auto-rotation enabled for a year. Additionally, in case of an incident they want to rotate the key...
Accepted AnswerAWS Key Management Service
2
answers
0
votes
144
views
AWS
rePost-User-7315218
asked a month ago

Why my Ec2 instance got stopped automatically at Aug 1 2024 3.30 AM by Aws internal agent in event name RetireGrant?

The cloudtrail event details i am giving below Event name - RetireGrant Event time - August 01, 2024, 03:30:22 (UTC+05:30) User name - - Event source - kms.amazonaws.com Resource type -...
Accepted AnswerAWS Key Management ServiceAWS Elastic BeanstalkAmazon EC2Amazon Elastic Container Registry (ECR)AWS CloudTrail
1
answers
0
votes
376
views
Ec2 Instances
asked a month ago

CMK creation through Terraform, can't delete it or destroy it.

Hello I accidentally created a CMK in another region that I'm not using with Terraform. However, when I attempt to delete the CMK using terraform destroy, it cannot be deleted. I have tried deleting...
AWS Key Management ServiceAccount SupportTerraform
3
answers
0
votes
209
views
profile picture
Bolivar Llerena
asked 2 months ago