Jul 9, 2018

With AWS KMS you can perform the following cryptographic functions using master keys:

  • Encrypt, decrypt, and re-encrypt data
  • Generate data encryption keys that you can export from the service in plaintext or encrypted under a master key that doesn't leave the service
  • Generate random numbers suitable for cryptographic applications