Enterprise Cloud Security and Governance

Implementation

Now that we know the basics of KMS and how it works, let's go ahead and generate our first KMS key and try out the encryption and decryption:

1. Generate a customer master key: The first thing that needs to be done is to generate a customer master key. This key will be used for our encryption and decryption functionality. Inside the Identity and Access Management service, there is a tab called Encryption keys. By default, we see that there are certain CMK pre-generated for various services. In order to generate our own CMK, we need to click on Create key:

2. Fill in the details: Once you click on Create Key, you will be asked to ...