2.1

2.1 Create KMS Keys in Console

Review and ensure that you have setup your development environment before going through the steps below.

Create a Customer Master Key in AWS KMS

1. Go to the KMS Console.
2. Click Customer managed keys and click the Create key button.
3. Enter ceoa-2-key Alias and a Description and click Next.
4. Click Next on the Add tags page.
5. On the Define key administrative permissions page, select a checkbox next to a user or users who can adminster this key and click Next.
6. On the Define key usage permissions page, select a checkbox next to a user or users who can use this key and click Next.
7. On the Review and edit key policy page, review the JSON policy and click Finish.
8. Make note of the ARN for the KMS key you created.
9. Click on the KMS key you just created.
10. Click the Key rotation tab.
11. Select the Automatically rotate this CMK every year checkbox and click the Save button.