Questions tagged [amazon-kms]

Key Management Service (KMS) is a service provided by Amazon as one of their AWS services. It is a managed service that makes it easy for you to create and manage encryption keys.

Filter by
Sorted by
Tagged with
2 votes
1 answer
13k views

"access to kms is not allowed" error returned when trying to fetch secret from AWS Secrets Manager

An IAM user in our aws account is trying to fetch a particular secret from Secrets Manager via aws cli but they cannot do that although they should have required permissions: aws secretsmanager get-...
Juraj Martinka's user avatar
1 vote
1 answer
4k views

How to change RDS KMS Key without losing data?

We have a PostgreSQL database hosted on AWS RDS. When it was created using cloudformation I set it to be encrypted, but didn't set the encryption key. As such it was set up to use the default ...
Martin Brown's user avatar
1 vote
2 answers
610 views

How to create or initiate an AWS managed keys

At "AWS console > KMS > AWS managed keys", I see "aws/ebs" under some regions and some regions do not have AWS managed "aws/ebs" key. I understand that we can ...
james's user avatar
  • 33
0 votes
2 answers
3k views

How to auto-scale ec2 instances with an encrypted root volume?

I am trying to configure an autoscaling setup in AWS where the Node Launch Template includes encrypting the root volume (EBS). I have configured a service linked role, and a CMK in Amazon KMS with an ...
TommyKTheDJ's user avatar
0 votes
1 answer
91 views

Best practice for storing personal information on AWS that we shouldn't be able to see

We store customer information that we shouldn't have access to, and don't want to inconvenience users by making them lose information if they forget their passwords, is there a good way to solve this ...
ze234we23's user avatar
0 votes
1 answer
315 views

Simple AWS Appsync app hits already 50k+ AWS Key Management Service requests

Last month we developed an Ionic app using AmplifyJS. It basically runs on top of an AWS Appsync API. It was an unpleasant journey so far, especially the @connections between DynamoDB tables. For ...
user3411864's user avatar