Skip to content

README.md

Latest commit

 

History

History
52 lines (34 loc) · 1.51 KB

README.md

File metadata and controls

52 lines (34 loc) · 1.51 KB

KMS: Create a key and encrypt data

Create a customer managed KMS key, encrypt and decrypt data, and generate a data key using the AWS CLI.

Source

https://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html

Use case

  • ID: kms/getting-started
  • Phase: create
  • Complexity: beginner
  • Core actions: kms:CreateKey, kms:Encrypt, kms:Decrypt

What it does

  1. Creates a customer managed KMS key
  2. Creates an alias for the key
  3. Describes the key metadata
  4. Encrypts data using fileb://
  5. Decrypts the ciphertext
  6. Generates a data key for client-side encryption
  7. Lists KMS keys and aliases

Running

bash aws-kms-gs.sh

Resources created

  • KMS customer managed key (with alias)

The key costs $1/month until deleted. The script prompts you to clean up when it finishes. Cleanup schedules the key for deletion with a 7-day waiting period.

Estimated time

  • Run: ~7 seconds

Cost

$1/month for the customer managed key. Delete the key promptly to avoid charges.

Related docs