We can create a CMK in KMS from the console as follows:
- Go to KMS service in the console.
- Select Customer managed keys from the left sidebar (if it's not already selected) and click Create Key.
- Provide an Alias and Description, leave the other selections as is, and click Next:
- Click Next until you reach the Key administrators page. Select the users and roles who can administer this key using the KMS API:
On the same page, leave the selection to allow key administrators to delete this key and click Next:
- On the Define ...