Questions tagged with AWS Key Management Service
AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications.
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
410 results
We run AWS Backup with a daily rule that copies an Aurora PostgreSQL cluster snapshot from a source account to a destination account in the same AWS Organization. The local backup completes every day....
Hello AWS Community / AWS Support Staff,
I'm posting here as a last resort. I'm the account owner, and I'm locked out of customer-managed KMS keys left behind by an abandoned test deployment. They ke...
KMS's service-principal allowlist in us-gov-west-1 recognizes the GLOBAL form
network-firewall.amazonaws.com but not the REGIONAL form
network-firewall.us-gov-west-1.amazonaws.com. Every CreateGrant e...
I gate a KMS key on Nitro Enclave attestation so that only my enclave can decrypt a
particular piece of material.
## The trade-off as I understand it
Binding the key policy to `kms:RecipientAttestat...
I'm building a signing service inside an AWS Nitro Enclave and I need a way to detect
rollback of state that the enclave itself authored but cannot store.
## Setup
The enclave has no persistent stor...
Creation of two `AWS::BedrockAgentCore::Gateway` resources fails during
AgentCore’s internal Policy Engine validation.
AgentCore successfully assumes each customer-supplied Gateway execution role...
I opted into UAE (me-central-1) on a new-ish account and can't launch compute there.
- ecs:CreateCluster → ThrottlingException: "Rate exceeded" (every call, 24h+, even single calls after long idle).
...
In [Amazon EC2 instance attestation documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm-attestation.html) there are instructions how to build an AMI, get PCR values for the ima...
I'm trying to import an external AES-256 KEK into AWS Payment Cryptography
using DiffieHellmanTr31KeyBlock in ap-southeast-1. Every attempt returns:
ValidationException: KeyBlock data in the importe...
I would like to use AWS KMS for code signing. Additionally, I would like to publish transparency logs as an assurance that the signing key has not signed unknown code. However CloudTrail logs don't in...
We store our passwords for our endpoints in secrets manager. These rotate every 7 days. We are noticing when the password rotates, the CDC then fails.
Is there a way to keep DMS updated with secrets ...
I’m trying to validate a cross-organization backup copy scenario and would appreciate clarification.
**Scenario**
* Account A1 in...