Tagging keys

In AWS KMS, you can add tags to a customer managed key when you create the KMS key, and tag or untag existing KMS keys unless they are pending deletion. You cannot tag aliases, custom key stores, AWS managed keys, AWS owned keys, or KMS keys in other AWS accounts. Tags are optional, but they can be very useful.

For more information, see Creating keys and Editing keys. For general information about tags, including best practices, tagging strategies, and the format and syntax of tags, see Tagging AWS resources in the Amazon Web Services General Reference.