Enterprise Cloud Security and Governance

Configuring AWS CLI

Since we are working with AWS CLI, we need to quickly configure the AWS keys. A better way is to use the IAM role, if that is feasible:

    [root@kplabs ~]# aws configure
    AWS Access Key ID [None]: YOUR-ACCESS-KEY-HERE
    AWS Secret Access Key [None]: YOUR-SECRET-KEY-HERE
    Default region name [None]: us-east-1
    Default output format [None]:  

Once we have setup appropriate access and secret keys/IAM role with permission on KMS, we can go ahead and verify if we are able to list our KMS keys:

1. Verify if the key listing is possible: Now that we have the AWS CLI configured with a proper set of keys for user zeal, we can go ahead and verify the list of keys available:

zeal@kplabs:~# aws kms list-keys --region us-east-1

2. Encryption ...