Tagging keys - AWS Key Management Service

Tagging keys

In AWS KMS, you can add tags to a customer managed CMK when you create the CMK, and tag or untag existing CMKs unless they are pending deletion. You cannot tag aliases, custom key stores, AWS managed CMKs, AWS owned CMKs, or CMKs in other AWS accounts. Tags are optional, but they can be very useful.

For more information, see Creating keys and Editing keys. For general information about tags, including best practices, tagging strategies, and the format and syntax of tags, see Tagging AWS resources in the Amazon Web Services General Reference.