Last updated
Last updated
This page was generated from content adapted from the
Important AWS CloudTrail and Amazon S3 support only . You cannot use an to encrypt your CloudTrail Logs. For help determining whether a KMS key is symmetric or asymmetric, see .
Note You might need to scroll to the right to see some of the callouts in the following example log entry.
Note You might need to scroll to the right to see some of the callouts in the following example log entry.
Note You might need to scroll to the right to see some of the callouts in the following example log entry.
Important Amazon EBS supports only . You cannot use an to encrypt an Amazon EBS volume. For help determining whether a KMS key is symmetric or asymmetric, see .
Important For both client-side and server-side encryption, Elastic Transcoder supports only . You cannot use an to encrypt your Elastic Transcoder files. For help determining whether a KMS key is symmetric or asymmetric, see .
Important AWS never stores your private encryption keys. Therefore, it is important that you manage your keys safely and securely. If you lose them, you won't be able to decrypt your data.
Important Amazon EMR supports only . You cannot use an to encrypt data at rest in an Amazon EMR cluster. For help determining whether a KMS key is symmetric or asymmetric, see .
Note Amazon WorkMail uses a symmetric mailbox encryption key to protect message keys. Previously, Amazon WorkMail protected each mailbox with an asymmetric key pair. It used the public key to encrypt each message key and the private key to decrypt it. The private mailbox key was protected by the KMS key for the organization. Existing mailboxes might still use an asymmetric mailbox key pair. This change does not affect the security of the mailbox or its messages.
Important Amazon Redshift supports only symmetric encryption KMS keys. You cannot use an asymmetric KMS key in an Amazon Redshift encryption workflow. For help determining whether a KMS key is symmetric or asymmetric, see .
Important Amazon RDS supports only . You cannot use an to encrypt data in an Amazon RDS database. For help determining whether a KMS key is symmetric or asymmetric, see .
Important Amazon SES supports only . You cannot use an to encrypt your Amazon SES email messages. For help determining whether a KMS key is symmetric or asymmetric, see .
Important Parameter Store supports only . You cannot use an to encrypt your parameters. For help determining whether a KMS key is symmetric or asymmetric, see .
Important Amazon WorkMail supports only symmetric encryption KMS keys. You cannot use an asymmetric KMS key to encrypt data in Amazon WorkMail. For help determining whether a KMS key is symmetric or asymmetric, see .
Important WorkSpaces supports only symmetric encryption KMS keys. You cannot use an asymmetric KMS key to encrypt the volumes in an WorkSpaces. For help determining whether a KMS key is symmetric or asymmetric, see .