AWS Key Management Service (AWS KMS)
Create and control keys used to encrypt or digitally sign your data
Start with 20,000 free requests
per month with the AWS Free Tier
Centrally manage keys and define policies across integrated services and applications from a single point.
Encrypt data within your applications with the integrated AWS Encryption SDK data encryption library.
Perform digital signing operations using asymmetric key pairs to ensure data integrity.
Securely generate Hash-based Message Authentication Codes (HMACs) that ensure message integrity and authenticity.
How it works
Use cases
Protect your data at rest
Activate server-side encryption with AWS KMS using AWS KMS keys that you control and manage.
Learn more about AWS service integration »
Encrypt and decrypt data
Use AWS Encryption SDK to securely handle cryptographic operations in your applications.
Sign and verify digital signatures
Protect signing operations with AWS KMS using asymmetric KMS keys.
Validate JSON web tokens using HMAC
Generate HMAC using AWS KMS to verify message integrity and authentication.