AWS Security Cookbook

There's more...

In this recipe, we used SHA_1 to wrap our external key material before uploading it. You can select a more secure alternative from the Select wrapping algorithm drop-down menu:

Let's quickly go through some more details regarding importing keys into AWS KMS:

• When we import our own key material, we are responsible for generating the key material with randomness, as per our security requirements. We are also responsible for the durability of the key material.
• With an imported key material, we can set an expiration date for the key material and also manually delete the key material. We can make the key available again in the ...