Customer data is stored in S3 and the people who can use the encryption key must be restricted.
Implement auditable key management.
Which design is most appropriate?
AWS KMS manages encryption keys, and the key policy controls which principals can administer or use the key in addition to IAM permissions.
Detailed explanation
Plaintext key storage defeats the protection provided by encryption.
Plaintext key storage defeats the protection provided by encryption.
KMS key permissions, including the key policy, also participate in authorization.
KMS key permissions, including the key policy, also participate in authorization.
A root credential is not an encryption-key management design and breaks separation of duties.
A root credential is not an encryption-key management design and breaks separation of duties.
KMS manages the key and its policy can control key administrators and users.
KMS manages the key and its policy can control key administrators and users.
Check official documentation
Compare the following points with the official documentation.
AWS KMSのキー管理とキーポリシーの公式説明を確認する。
What to confirm
保存時暗号化とキー利用権限をKMSへ対応付けられる。
Key points
- AWS KMS
- Encryption at rest
- KMS key policy
- Key access
Notes
- Environment: AWS公式KMSドキュメントの確認
- Confirm current AWS service behavior and security guidance in the official documentation.
Foundation review
Two authorization checks
Access to encrypted data generally requires data-service permission and permission to use the KMS key.
Key custody
Keeping key policy and key material protected preserves the boundary encryption is meant to create.