AWS Key Management Service

Create and control keys used to encrypt or digitally sign your data

Get started with AWS KMS

Benefits

Manage keys and define policies from a single point

Centrally manage keys and define policies across integrated services and applications from a single point.

Encrypt data within your applications

Encrypt data within your applications with the AWS Encryption SDK data encryption library.

Perform signing operations

Perform signing operations using asymmetric key pairs to validate digital signatures.

Securely generate HMACs

Securely generate hash-based message authentication codes (HMACs) that ensure message integrity and authenticity.

What is AWS KMS?

Use AWS KMS to encrypt data across your AWS workloads, digitally sign data, encrypt within your applications using AWS Encryption SDK, and generate and verify message authentication codes (MACs). To watch in your local language, select this video, choose the settings icon, and pick your preferred subtitle option.