AWS Security Cookbook

Creating key configuration for an external key

We can create key configuration for an external key as follows:

1. Go to KMS service in the console.
2. Click on Create Key.
3. Provide an Alias and Description. Expand the Advanced options menu and select External. Here, we can read the security, availability, and durability implications while using an external key, select the corresponding checkbox, and click Next:

4. On the screen for Add tags, add any tags if required.
5. On the screen for Define key administrative permissions, add your key administrators.
6. On the screen for Define key usage permissions, define your key users. If required, we can also ...