From the course: Complete Guide to AWS Security and Compliance Management
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Creating a multi-region KMS key - Amazon Web Services (AWS) Tutorial
From the course: Complete Guide to AWS Security and Compliance Management
Creating a multi-region KMS key
- [Instructor] Now that we've configured a KMS key with the multi-region option, let's go ahead and enable additional regions in which this KMS key can be used. All right, within the Customer Managed Key section of KMS, I can see the key that we just created, the engineering-admin key. Clicking into it, I go to the Regionality tab. Note that it is a multi-region primary key without any replicas. Since I want to create new replicas now, I'll go ahead and click the Create New Replica Keys button. At this point, what I need to do is identify the region or regions in which I want to be able to use this key. Since we are doing data protection in Mumbai, I add that to the list. We're also planning on doing operations in Ohio, so I'll add that region as well. Wonderful, that looks good, so I go ahead and click the Next button. It's important to note that at any time, I could go back and add or remove regions. The label screen is pre-populated with the alias for the keys that I'm replicating.…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
-
-
-
Understanding Amazon Macie3m 11s
-
Configuring a Macie job9m 25s
-
(Locked)
Exploring Macie results2m 53s
-
(Locked)
Understanding Key Management Service3m 41s
-
(Locked)
Creating a KMS key5m 8s
-
(Locked)
Creating a multi-region KMS key4m 14s
-
(Locked)
Using a KMS in S35m 43s
-
(Locked)
Using KMS and an IAM role7m 31s
-
(Locked)
Automating KMS key rotation4m 21s
-
(Locked)
Deleting a KMS key6m 10s
-
(Locked)
Enabling EBS default encryption8m 11s
-
(Locked)
Understanding Secrets Manager2m 14s
-
(Locked)
Using Secrets Manager5m 18s
-
(Locked)
Enabling autorotation with Secrets Manager7m 58s
-
(Locked)
Creating a multi-region secret4m 10s
-
(Locked)
Deleting a Secrets Manager secret5m 59s
-
(Locked)
Understanding AWS CloudHSM2m 38s
-
(Locked)
Understanding Systems Manager3m 44s
-
(Locked)
Implementing Systems Manager3m 52s
-
(Locked)
Resolving compliance with Systems Manager5m 16s
-
(Locked)
Creating Resource Groups3m 9s
-
(Locked)
Patching with Systems Manager3m 46s
-
(Locked)
Understanding Incident Manager2m 38s
-
(Locked)
Using Parameter Store4m 2s
-
(Locked)
Understand Certificate Manager4m
-
(Locked)
Creating a private certificate authority4m 52s
-
(Locked)
Creating a private certificate2m 40s
-
(Locked)
Using a private certificate6m 43s
-
(Locked)
Understanding Payment Cryptography4m 51s
-
(Locked)
Challenge: KMS1m 28s
-
(Locked)
Solution: KMS5m 34s
-
-
-
-