Stack Overflow
Stack Overflow

Questions tagged [amazon-kms]

AWS Key Management Service (KMS) is an encryption and key management service scaled for the cloud. KMS keys and functionality are used by other AWS services, and you can use them to protect data in your own applications that use AWS.

AWS Key Management Service (KMS) is an encryption and key management service scaled for the cloud. KMS keys and functionality are used by other AWS services, and you can use them to protect data in your own applications that use AWS.

704 questions
0
votes
1 answer

AWS KMS subscription fails

I enter the console, go to IAM management, Encryption Keys: it says: "You are not currently subscribed to the AWS Key Management Service. Click here to subscribe." I click, and it returns me to console's home. I have all Security Status approve, and…
avi1074
  • 23
  • 4
0
votes
1 answer

botocore.exceptions.ClientError : Client Side KMS Encryption

I am trying to encrypt a pdf file in my application with a key I created in AWS IAM and upload the encrypted file to S3. I use boto3 to achieve this. I could upload the file to S3 without encryption though. Here is my function that does the…
Vinodh Ravi
  • 67
  • 3
  • 11
0
votes
1 answer

encrypt/decrypt contents of whole folder in powershell using AWS KMS

Can anyone please help me in encrypting/decrypting the contents of files in folder using AWS KMS? I want powershell script to do the same. I would like to encrypt the folder before uploading to an amazon s3 bucket and want to decrypt it after…
Sharat Patil
  • 45
  • 5
0
votes
1 answer

AWS Service Only Returning XML

I'm using AWS KMS through REST + presigned urls and can't seem to get it to return anything but XML. I'd really prefer JSON. My URL looks something like: kms./Action=ListAliases Suggestions?
sparkFinder
  • 3,336
  • 10
  • 42
  • 57
0
votes
2 answers

AWS iOS SDK with KMS

I'm trying to find examples or patterns on how to use the AWS iOS SDK with KMS to no result. The iOS SDK docs here: https://aws.amazon.com/developers/getting-started/ios/ https://github.com/aws/aws-sdk-ios seem to have implied in S3 and EC2 examples…
sparkFinder
  • 3,336
  • 10
  • 42
  • 57
0
votes
1 answer

encryption of ebs volume after creation amazon web services

I want to use KMS to encrypt my volumes. I know how to do it upon creation but with the already created volumes I cant seem to find a solution. Is the RDS logic applied for ebs too? Is there only the possibility to do it upon creation?
Kratos
  • 1,064
  • 4
  • 20
  • 39
0
votes
1 answer

Using Amazon KMS service on Heroku

Has anybody tried to use AWS KMS on Heroku? On one hand, Heroku runs on AWS, so presumably it should work. On other hand, I haven't seen any references that it was used in Heroku. My main goal is to be able to get an encryption key from a hardware…
Victor Ronin
  • 22,758
  • 18
  • 92
  • 184
-1
votes
1 answer

aws cli: how to find kms key id?

When I run the following command, this is what I get. $ aws ec2 get-ebs-default-kms-key-id --region us-west-2 { "KmsKeyId": "alias/aws/ebs" } But what I really want is the key id under "(default) aws/ebs" (shown below).
user180574
  • 5,681
  • 13
  • 53
  • 94
-1
votes
2 answers

s3 get_object giving Access Denied for SSE-KMS Encrypted Object

I am trying to get the s3 encrypted object in lambda function using following code, but i am getting Access denied error for Get Object. s3 = boto3.client('s3') response = s3.get_object(Bucket=bucket, Key=key) I lambda has a assigned ole in which i…
Taufik Pirjade
  • 380
  • 6
  • 26
-1
votes
1 answer

An error occurred (NotAuthorizedException) when calling the UpdateUserPool operation

An error occurred (NotAuthorizedException) when calling the UpdateUserPool operation: Caller needs to have kms:CreateGrant permission on provided KMS Key aws cognito-idp update-user-pool --user-pool-id {user_pool_id} --lambda-config…
Ranjan Raj Shrestha
  • 89
  • 1
  • 6
-1
votes
1 answer

How Can I get details of an AMI or Snapshot if It is encrypted and with which key AWS Managed CMK or Customer Manager CMK in AWS

Issue : ➜ I want to get information about my AMI to know if it is Encrypted or not and If yes, then with which key it is encrypted with (AWS Managed CMK or Customer Manager CMK) so that I can utilize this information while sharing my AMI with…
DINESH RATHEE
  • 97
  • 1
  • 4
-1
votes
1 answer

AWS kms.generateRandom in a lambda function does not work

I am trying to generate a random key in a lambda using kms.generateRandom. I tried the sample mentioned in the document but it does not return anything. No error no Data. Has anybody used it? Do I have to grant any access to my lambda? Below is the…
MadhaviP
  • 1
  • 2
-1
votes
1 answer

How to set the environment variable in supervisord

I have a supervisord file where like this [program:decrypt] command=export KEYTOKEN=$(aws kms decrypt --ciphertext-blob fileb://<(echo %(ENV_TOKENENC)s | base64 -d) --output text --query Plaintext --region %(ENV_REGION)s | base64 -d ) I am passing…
Rob
  • 150
  • 1
  • 4
  • 17
-2
votes
1 answer

In AWS, Can we use only one customer managed key to two different dynamodb table? Is it good practice?

DynamoDbTableKmsKey: Type: AWS::KMS::Key Table1: Type: AWS::DynamoDB::Table Properties: SSESpecification: SSEEnabled: True SSEType: KMS KMSMasterKeyId: !Ref DynamoDbTableKmsKey Table2: Type:…
Mondy
  • 17
  • 3
1 2 3
…
46
47