December 2017
Intermediate to advanced
410 pages
11h 5m
English
In AWS KMS, the first step is to generate a Customer Master Key (CMK). This key is a symmetric key based on AES GCM 256 bits.
This CMK will be used for encryption and decryption of data.
In the backend, the CMK is stored in HSM and the key is never shared with the user.
We can call the KMS API with the data that needs to be encrypted or decrypted and KMS will do it for us. This is further illustrated in the subsequent diagram.
Read now
Unlock full access