KMS — Key Management Service
How KMS really protects data: keys whose material never leaves the service, envelope encryption with data keys, key policies (and why the account root statement matters), grants and encryption context, rotation, multi-Region and external keys, what every call costs, and when CloudHSM is the better fit.
Sign up free to read the full topic
More Cloud topics
- IAM — Identity and Access Management
- IAM Identity Center
- Inspector — Automated Vulnerability Management
- Key Vault — Secrets, Keys and Certificates
- Keyspaces — Managed Apache Cassandra
- Kinesis — Real-Time Data Streaming
- Lake Formation — Data Lake Permissions
- Lambda — Serverless Architecture Patterns
- Lambda — Serverless Functions
- Lambda Advanced — SnapStart, Concurrency and Tuning
- Lex — Conversational AI
- Lightsail — Simplified Cloud for Small Workloads
Start free on Cariara · Coding problems · System design studio