AWS Key Management Service (KMS) Reviews & Product Details

AWS has good number of services which are best among all Cloud service providers for me like AWS Transist Gateway to support Hub and Spoke architecture, AWS WAF and Shield for L3,L4 & L7 attacks, AWS IAM, AWS Gurd duty, AWS Inspector etc Review collected by and hosted on G2.com.

AWS Shield advance service needs an improvement to protect from every type of DDoS attacks as it was failed twice to detect DDoS attacks and failed to protect our resources and systems where inaccessible during DDoS attack simulation Review collected by and hosted on G2.com.

It's a very good service for those who looking for cryptography security for their services. It's very useful management within the aws which provide encryption and description of your data and keep data secure when you send data or save data over the servers. Review collected by and hosted on G2.com.

As of now I don't see many problem with this. Review collected by and hosted on G2.com.

Was very easy to create a key to be able to encrypt/decrypt an rds database. The granularity of security is also good to decide who has access to the key. The built-in key rotation is also a nice feature. Review collected by and hosted on G2.com.

Nothing at the moment. It was very easy to setup for my needs and did not have any problems yet. Review collected by and hosted on G2.com.

The service uptime gives you peace of mind and that is very important for such a critical service like key management. If your whole infrastructure is based in AWS, then KMS is a no brainer but keep in mind that this service will tie you up to it forever. Review collected by and hosted on G2.com.

The somewhat cumbersome API when you don't use the java SDK. I mean, I have used the node.js SDK and it works fine but the API is not very "idiomatic" and looks like a JAVA SDK. Review collected by and hosted on G2.com.

AWS KMS service is one of the best encryption services available on AWS for encryption. AWS KMS is use its own AWS-managed keys for encryption for your data. In my view, it is better than AES -256 based encryption because we do not need to manage any key in KMS. AWS will do on behalf of you. KMS can also be used to encrypt your data in the S3 bucket. In some of the cases, a lot of sensitive data like the details of users can also be encrypted using this. It is a better alternative to cloud HSM. Review collected by and hosted on G2.com.

AWS KMS service pricing depends upon the number of keys generated, in some cases you may need to pay a lot of money. Review collected by and hosted on G2.com.

This service is the enabler for all other services that AWS uses to encrypt your data, eg s3, rds, kinesis and such. I use it for parameter store to encrypt api keys and its really simple and does it job good for that Review collected by and hosted on G2.com.

I dont really have anything that I believe I dislike with the service Review collected by and hosted on G2.com.

We have a policy where Bring Your Own Key is required for confidential data in the cloud and AWS has streamlined the process for us. Review collected by and hosted on G2.com.

When we import an encryption key for usage in another account that other account is not able to reference our key by key alias natively. It should be easy enough for AWS to add the ability to reference an encryption key by key alias across accounts. Review collected by and hosted on G2.com.

Ease of use. There can be a lot of overhead to managing secrets. You need to make them available for people and processes that should have access, while restricting access for nearly everyone else. There are lots of options out there for how to do this, but the fact that KMS is already bolted into so many of Amazon's service offerings, and the fact that they support KMS client SDKs for every relevant programming language, plus command line tools makes enterprise level encryption available to any project or organization already using AWS. Review collected by and hosted on G2.com.

Certain Client SDKs are painful to use. Having played with python and nodejs SDKs, i've found that example code is hard to find and I've not had great success with these SDKs. AWS Service integration, CLI usage, .NET and JAVA are all seamless which is why I reference ease of use as my favorite aspect of KMS. Review collected by and hosted on G2.com.

I like the Master key and Data key concept in KMS. this is very easy to implement and I like AWS UI to manage it. Review collected by and hosted on G2.com.

AWS should have been provided more c# samples to use all its features. Review collected by and hosted on G2.com.

The key rotation does not need to decrypt and re-encrypt the data that was encrypted by the key. Old keys are still available to decrypt the data and the newly encrypted data will use new keys. It has automatic key rotation that is essential for compliance purposes. It does not require configuration to start. Review collected by and hosted on G2.com.

KMS gives an easy rotation but you do not have much control. AWS will rotate it for you according to your own schedule annually. You can not force it. In addition, if you import your own keys, you must manage this key rotation on your own, which overrides the nice rotation service provided by AWS and, you must decrypt and re-encrypt the data encrypted with those keys. So keep this in mind if you are thinking about using your own keys. Review collected by and hosted on G2.com.