AWS KMS: Managing Encryption Keys

Key Management Service lets you create and manage encryption keys. I use it to encrypt S3 buckets, EBS volumes, and RDS databases. KMS integrates with many AWS services, so you can enable encryption with a checkbox. You can create keys, define usage policies, and track key usage in CloudTrail. The most important concept is customer master keys (CMKs) and data keys. It's the foundation of encryption on AWS and a core skill for any security-conscious user.