Creating keys in KMS
In this recipe, we will create a customer-managed KMS key with the key type set to symmetric key. A symmetric key is the most common key that we will create with KMS. It is also worth noting that KMS keys, which are the primary resources within KMS, were once known as customer master keys (CMKs). This renaming helps avoid confusion with the term customer-managed keys, which could also be abbreviated as CMKs.
Getting ready
We’ll need the following to complete this recipe:
- A working AWS account (
awsseccb-sandbox-1) and a user (awsseccbadmin1), as described in the Technical requirements section. - Two users or roles. These could be IAM users or roles, including those corresponding to IAM Identity Center users. I will be using the
awsseccb_admin1user as the key administrator. Key administrators can administer the key through the KMS API. I will use another user,awsseccb_user1, as the key user. Key users can use the customer-managed key to encrypt...
