01
Standard Encryption Key
This preset creates a KMS key with all defaults: AES-256 symmetric encryption, software-based protection, no automatic rotation, and no deletion protection. This is the simplest configuration,...
Loading...
Ready-to-deploy configuration presets for KMS Key. Each preset is a complete manifest you can copy, customize, and deploy.
3 presetsThis preset creates a KMS key with all defaults: AES-256 symmetric encryption, software-based protection, no automatic rotation, and no deletion protection. This is the simplest configuration,...
This preset creates a production-grade KMS key with annual automatic rotation and deletion protection enabled. It is the recommended starting point for any KMS key that protects production data --...
This preset creates an RSA-2048 asymmetric key for digital signature generation and verification. The private key never leaves KMS; only the public key can be exported for external verification.