Managing keys

To get started with AWS KMS, create an AWS KMS key.

The topics in this section explain how to manage the basic KMS key, a symmetric encryption KMS key, from creation to deletion. It includes topics on editing and viewing keys, tagging keys, enabling and disabling keys, rotating key material, and using AWS tools and services to monitor use of your KMS keys. It also includes information about using AWS CloudFormation to create and manage your KMS keys and a key state reference that shows the required key state for each AWS KMS operation.

For information about creating, using, and managing other types of KMS keys, see Special-purpose keys.

Topics

• Creating keys
• Using aliases
• Viewing keys
• Editing keys
• Tagging keys
• Enabling and disabling keys
• Rotating keys
• Monitoring keys
• Using CloudFormation templates
• Deleting keys
• Key state reference