0

Is there a way to track or log what AWS KMS is using which key for which purposes.

I noticed that in some accounts that we do not use KMS, there are still KMS activities in the billing. In fact, there are activities in every region.

While these activities are in the free tier, it would be transparent to know what are these activities. Especially so since "keys" are involved.

kenchew
  • 324
  • 5
  • 17

1 Answers1

3

You can log all KMS activites with CloudTrail.

Logging AWS KMS API Calls Using AWS CloudTrail

jens walter
  • 13,269
  • 2
  • 56
  • 54