Configuring an AWS KMS provider - Senetas/SKC GitHub Wiki
Configure an Identity and Access Management (IAM) User

Select the IAM service and select Users. Click on the Add user button.

Add the user name and select programmatic access only.

Do not add any permissions and select Next

Add any tags (Optional) and click Next.

Ignore the warning regarding no user permissions and click on Create user.

Make sure you download your security credentials at this step!.
Configure a Key Management Service (KSM) key

Log into the AWS console and select the Key Management Service (KMS)
(In this image I already have a key created called Dev)

Create a new key and select the options shown above, then click Next.

Enter a name for the key and a description, then click Next.

Do not select any users here unless you would like separate administrators to be able to delete this key, click on next.

Select the previously created user and click Next.

Click on Finish.

You should now see your newly created key. Copy the Key ID and save it for later.