What I like most about AWS KMS is how seamlessly it enables encryption across AWS services while abstracting away the complexity of managing cryptographic keys. It offers centralized key management, automatic key rotation, granular IAM policies, audit logging through CloudTrail, and hardware security module (HSM)-backed protection.

Because it integrates natively with most AWS services, implementing encryption feels straightforward and often doesn’t require changes to application code. Review collected by and hosted on G2.com.

While AWS KMS is straightforward for standard encryption needs, it can take some time to fully understand customer-managed keys, key policies, grants, and cross-account access. If your applications perform a very high volume of encryption operations, it’s also worth factoring in API request costs. Review collected by and hosted on G2.com.

I use AWS Key Management Service for encryption and secure key management across AWS services. I mainly use it to encrypt sensitive data stored in S3. The best thing I like about AWS Key Management Service is that it provides centralized encryption key management with strong security and access control. It also integrates seamlessly with AWS services, which has made encryption much easier for me. Review collected by and hosted on G2.com.

There isn’t any major dislike I have about AWS Key Management Services; it’s a good product overall. Review collected by and hosted on G2.com.

AWS has good number of services which are best among all Cloud service providers for me like AWS Transist Gateway to support Hub and Spoke architecture, AWS WAF and Shield for L3,L4 & L7 attacks, AWS IAM, AWS Gurd duty, AWS Inspector etc Review collected by and hosted on G2.com.

AWS Shield advance service needs an improvement to protect from every type of DDoS attacks as it was failed twice to detect DDoS attacks and failed to protect our resources and systems where inaccessible during DDoS attack simulation Review collected by and hosted on G2.com.

It's a very good service for those who looking for cryptography security for their services. It's very useful management within the aws which provide encryption and description of your data and keep data secure when you send data or save data over the servers. Review collected by and hosted on G2.com.

As of now I don't see many problem with this. Review collected by and hosted on G2.com.

Was very easy to create a key to be able to encrypt/decrypt an rds database. The granularity of security is also good to decide who has access to the key. The built-in key rotation is also a nice feature. Review collected by and hosted on G2.com.

Nothing at the moment. It was very easy to setup for my needs and did not have any problems yet. Review collected by and hosted on G2.com.

The service uptime gives you peace of mind and that is very important for such a critical service like key management. If your whole infrastructure is based in AWS, then KMS is a no brainer but keep in mind that this service will tie you up to it forever. Review collected by and hosted on G2.com.

The somewhat cumbersome API when you don't use the java SDK. I mean, I have used the node.js SDK and it works fine but the API is not very "idiomatic" and looks like a JAVA SDK. Review collected by and hosted on G2.com.

AWS KMS service is one of the best encryption services available on AWS for encryption. AWS KMS is use its own AWS-managed keys for encryption for your data. In my view, it is better than AES -256 based encryption because we do not need to manage any key in KMS. AWS will do on behalf of you. KMS can also be used to encrypt your data in the S3 bucket. In some of the cases, a lot of sensitive data like the details of users can also be encrypted using this. It is a better alternative to cloud HSM. Review collected by and hosted on G2.com.

AWS KMS service pricing depends upon the number of keys generated, in some cases you may need to pay a lot of money. Review collected by and hosted on G2.com.

This service is the enabler for all other services that AWS uses to encrypt your data, eg s3, rds, kinesis and such. I use it for parameter store to encrypt api keys and its really simple and does it job good for that Review collected by and hosted on G2.com.

I dont really have anything that I believe I dislike with the service Review collected by and hosted on G2.com.

We have a policy where Bring Your Own Key is required for confidential data in the cloud and AWS has streamlined the process for us. Review collected by and hosted on G2.com.

When we import an encryption key for usage in another account that other account is not able to reference our key by key alias natively. It should be easy enough for AWS to add the ability to reference an encryption key by key alias across accounts. Review collected by and hosted on G2.com.

Ease of use. There can be a lot of overhead to managing secrets. You need to make them available for people and processes that should have access, while restricting access for nearly everyone else. There are lots of options out there for how to do this, but the fact that KMS is already bolted into so many of Amazon's service offerings, and the fact that they support KMS client SDKs for every relevant programming language, plus command line tools makes enterprise level encryption available to any project or organization already using AWS. Review collected by and hosted on G2.com.

Certain Client SDKs are painful to use. Having played with python and nodejs SDKs, i've found that example code is hard to find and I've not had great success with these SDKs. AWS Service integration, CLI usage, .NET and JAVA are all seamless which is why I reference ease of use as my favorite aspect of KMS. Review collected by and hosted on G2.com.