AWS Security Cookbook

How to do it...

We can demonstrate the use of key policies with condition keys as follows:

1. Create a key with the default configuration from the console, as follows:
   1. Provide an Alias and Description on the first screen. I have provided testkey and test key, respectively.
   2. Optionally, you can add any Tags on the next screen.
   3. On the next screen, do not add any key administrators.
   4. Do not add any key users either.
   5. Review the policy and click Finish:

2. You can add this KMS CMK as the encryption key for an S3 bucket in the same region as follows:
   1. Go to the Properties tab of an S3 bucket.
   2. Click on Default encryption.
   3. Select AWS-KMS as the encryption ...