What you can do with Amazon KMS
Every task in plain language. Pick one, and we can help you get access.
8 things you can do
Amazon KMS
AWS Key Management Service (KMS) is a managed service that makes it easy to create and control the cryptographic keys used to protect your data, integrated with other AWS services to simplify encryption of data stored and managed in those services.
8 multi-step recipesRecipes: multi-step jobs
Create Key and DescribeCreate a KMS key then describe it to confirm its state.Disable and Schedule Key Deletion
Disable a key then schedule it for deletion after a waiting period.Enable Key and Verify State
Enable a key then describe it to confirm the Enabled state.Envelope Encrypt and Decrypt
Generate a data key, encrypt plaintext, then decrypt the ciphertext.Generate and Recover Data Key
Generate a data key then decrypt the encrypted copy to recover it.List and Describe Keys
List account KMS keys then describe the first returned key.Provision Key and Encrypt
Create a key, enable it, and encrypt a payload to confirm it works.Sign and Verify
Sign a message with an asymmetric key then verify the resulting signature.