InfoQ – Amazon releases AWS Key Management Service
05Dec14
At their re:invent 2014 show Amazon launched AWS Key Management Service (KMS), “a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data, and uses Hardware Security Modules (HSMs) to protect the security of your keys”. At launch the service supported EBS, S3 and Redshift. Additional support for Elastic Transcoder was added in late November.
Filed under: cloud, InfoQ news, security | 2 Comments
Tags: amazon, aws, cloud, encryption, HSM, KMS, security
Subscribe
Recent Comments
Tim Coote on Ross Anderson RIP iain on Skiing in Espace Killy (Val… Chris Swan on Getting more from a British Ga… Murray Cowell on Getting more from a British Ga… JL on AI MacGuffin 
Pinboard.in bookmarks- Here's why RISC-V is important
- The marshmallow paradox – VAT or no VAT?
- Doctrine, Droids, & Dragons: An Impassioned Plea for Unconventional Professional Development
- SARS-CoV-2 BA.1 and BA.2 breakthrough infections boost antibody responses to early Omicron subvariants but not BQ.1.1 or XBB.1.5 - ScienceDirect
- How Many Calories Do You Really Burn on Cardio Machines?
- America’s animal shelters are overwhelmed. Pets – and staff – are at breaking point
- Netflix Secret Codes 2024: Every Movie & Series Category on Netflix
- Pharmaceutical giant Bayer is getting rid of bosses and asking nearly 100,000 workers to ‘self-organize’
- View of The TESCREAL bundle: Eugenics and the promise of utopia through artificial general intelligence
- [no title]
Chris Swan's Weblog 
I’d love to use dmg or encrypted dmgs but how do I open (mount) them in linux or windows?
EBS encrypted volumes are transparent to the operating system – they just look like regular disks – so there’s nothing special involved in mounting (key management is taking place in the service layer and never gets exposed to the inside of an instance).
Using EBS encrypted volumes as boot disks is a bit fiddly, as you need to create an empty volume, mount it onto an instance, pour in the boot file system, unmount, remount onto the instance you want to use it… (there isn’t such a thing as an encrypted AMI).