February 2020
Intermediate to advanced
440 pages
13h 51m
English
We need a working AWS account and two users: an administrator user and a user with no permissions. The CLI profiles should be configured for these users. I will be calling these users and their CLI profiles awssecadmin and testuser, respectively.
Create a KMS key by following previous recipes in this chapter. Alternatively, use the following command to create a KMS key from the AWS CLI:
aws kms create-key --profile awssecadmin
This will provide an output similar to the following:

Next, we will check whether our test user has any permissions by running the following command:
aws kms encrypt \ --plaintext "hello 3" \ --key-id ...
Read now
Unlock full access