Summary

• AWS KMS is a scalable encryption and key management service provided by Amazon.
• There are two types of popular encryption methods: symmetric and asymmetric.
• Symmetric encryption uses single key to encrypt and decrypt data.
• Asymmetric encryption uses a public key and a private key to encrypt and decrypt data.
• KMS supports only symmetric encryption using a single key to encrypt and decrypt data.
• There are two types of keys: data keys and customer master keys.
• A data key is used to encrypt the data.
• A CMK is used to encrypt a data key.
• KMS does not store or manage data keys. It centrally stores and manages the encryption keys. These are called CMKs.
• Data keys are stored along with the data by AWS services that use KMS to encrypt or decrypt data.
• There are a number of AWS services that support KMS to secure data stored on them.

...