I like the Master key and Data key concept in KMS. this is very easy to implement and I like AWS UI to manage it. Review collected by and hosted on G2.com.

AWS should have been provided more c# samples to use all its features. Review collected by and hosted on G2.com.

The key rotation does not need to decrypt and re-encrypt the data that was encrypted by the key. Old keys are still available to decrypt the data and the newly encrypted data will use new keys. It has automatic key rotation that is essential for compliance purposes. It does not require configuration to start. Review collected by and hosted on G2.com.

KMS gives an easy rotation but you do not have much control. AWS will rotate it for you according to your own schedule annually. You can not force it. In addition, if you import your own keys, you must manage this key rotation on your own, which overrides the nice rotation service provided by AWS and, you must decrypt and re-encrypt the data encrypted with those keys. So keep this in mind if you are thinking about using your own keys. Review collected by and hosted on G2.com.

The ability to securely store keys and use them for encrypting apps and storage is unarguably the best feature of the AWS KMS. Within the AWS ecosystem the integration and interoperability is remarkable. Review collected by and hosted on G2.com.

Nothing that I can think of, the service is really straight forward and easy to use. Review collected by and hosted on G2.com.

Easy way to store your key pairs for use on EC2, Lambda, and a large amount of other assorted AWS services for almost no charge. Keeping track of keys on premise is dangerous and risky, beacuse it gives another system that you need to protect in order for your infrastructure to remain safe. through KMS, you can store all the keys that you need in AWS itself and therefore extend your security blanket to your keys as well. Review collected by and hosted on G2.com.

Not much. The UI and AWS console is not very intuitive and can be confusing at times. I would really like to see a redesign of the UI from AWS as it is needlessly complicated and incredibly slow for a select number of operations. Review collected by and hosted on G2.com.

I love the fact that we keep all of our keys in one place, and they're easily reachable via most of our internasl systems on an encrypted level. Review collected by and hosted on G2.com.

I dislike the pricing schema for it. Chargina on a per key model is simple, but illogical for larger companies to use. We have thousands of keys that we'd like to live inside of the system, but it's too expensive to justify. Review collected by and hosted on G2.com.

we have multiple products and for those can use different kms keys or share it depending upon environment Review collected by and hosted on G2.com.

I was able to create two kms with same name. had to delete one of those before i could proceed with using the right one. Review collected by and hosted on G2.com.

I love how easy it is to work with encryption keys. I love that metadata is saved with the key so there is not much information that is required to perform a decryption operation Review collected by and hosted on G2.com.

I don't like that root is preprovisioned in the kms key policy. I understand why but I feel like enabling iam access is something that should be done explicitly by the admin and not a default. Review collected by and hosted on G2.com.

-Easy to plug into application using AWS sdk

-Support for nearly All OS

-Good key rotation policy

-Lot of big and secure Applications trust KMS Review collected by and hosted on G2.com.

-Default key rotation policy is not ideal

-Could look confusing at first usage

-AWS UI is still for power user, newbies could struggle Review collected by and hosted on G2.com.

simple to use and integrate with your application flow Review collected by and hosted on G2.com.

more technical documentation explaining more on the hsm part Review collected by and hosted on G2.com.

When you need a good private key to secure your data, you've got it! Review collected by and hosted on G2.com.

A little hard to use at first. But in the end I figured it out. Review collected by and hosted on G2.com.