Enable Customer Managed Keys for your Organization on Amazon Web Services

Back Next

Step 2. Create an IAM policy for the key

In the AWS Management Console, create an IAM policy for the CMK to define its permissions. Note the policy name because you'll need it when you create an IAM role to access the key.

In the search bar, search for

IAM

Under

Access Management

, navigate to

Policies

Click

Create Policy

, switch to the JSON view, and enter the following text:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "VisualEditor0",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:DescribeKey"
      ],
      "Resource": "{your key ARN}"
    }
  ]
}

Click

Optionally, add tags to the policy.

Click

Enter a meaningful name for the policy, for example,

Informatica-KMS-Access

, and click

Create policy

Steps for creating and enabling the key

Download Guide

Watch

Comments

Communities