Configuring an AWS KMS provider - Senetas/SKC GitHub Wiki

Configure an Identity and Access Management (IAM) User

image

Select the IAM service and select Users. Click on the Add user button.

image

Add the user name and select programmatic access only.

image

Do not add any permissions and select Next

image

Add any tags (Optional) and click Next.

image

Ignore the warning regarding no user permissions and click on Create user.

image

Make sure you download your security credentials at this step!.

Configure a Key Management Service (KSM) key

image

Log into the AWS console and select the Key Management Service (KMS)
(In this image I already have a key created called Dev)

image

Create a new key and select the options shown above, then click Next.

image

Enter a name for the key and a description, then click Next.

image

Do not select any users here unless you would like separate administrators to be able to delete this key, click on next.

image

Select the previously created user and click Next.

image

Click on Finish.

image

You should now see your newly created key. Copy the Key ID and save it for later.