https://wiki.quizz.vn/ 2026-04-15T18:20:24+00:00 https://wiki.quizz.vn/ https://wiki.quizz.vn/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2025-12-28T06:46:59+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.quizz.vn/doku.php?id=aws:security:kms:aws-managed-vs-customer-managed&rev=1766904419&do=diff AWS-managed Keys vs Customer-managed Keys What it is: Two common ownership models for KMS keys. What it’s for: Choose the right control level for encryption. AWS-managed key: * Created and managed by AWS for an AWS service. * Simpler, less control. text/html 2025-12-28T07:33:13+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.quizz.vn/doku.php?id=aws:security:kms:cmk&rev=1766907193&do=diff Customer Managed Key (CMK) What it is: A KMS key that you create and manage (policies, access, rotation settings). What it’s for: * Stronger control over who can encrypt/decrypt. * Central key governance for compliance and auditing. * Cross-account key usage (via key policy + IAM). text/html 2025-12-28T06:47:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.quizz.vn/doku.php?id=aws:security:kms:key-policy&rev=1766904440&do=diff KMS Key Policy What it is: A resource-based policy attached to a KMS key that controls who can use/administer the key. What it’s for: * Define which principals can encrypt/decrypt with the key. * Define who can manage the key (admin actions).