G2

Atharva P.

Cloud BI Engineer

Enterprise (> 1000 emp.)

7/18/2026

"Seamless, Centralized Encryption Across AWS with Strong Key Management"

4.5/5

What do you like best about AWS Key Management Service (KMS)?

What I like most about AWS KMS is how seamlessly it enables encryption across AWS services while abstracting away the complexity of managing cryptographic keys. It offers centralized key management, automatic key rotation, granular IAM policies, audit logging through CloudTrail, and hardware security module (HSM)-backed protection.

Because it integrates natively with most AWS services, implementing encryption feels straightforward and often doesn’t require changes to application code. Review collected by and hosted on G2.com.

What do you dislike about AWS Key Management Service (KMS)?

While AWS KMS is straightforward for standard encryption needs, it can take some time to fully understand customer-managed keys, key policies, grants, and cross-account access. If your applications perform a very high volume of encryption operations, it’s also worth factoring in API request costs. Review collected by and hosted on G2.com.

What problems is AWS Key Management Service (KMS) solving and how is that benefiting you?

AWS KMS provides centralized encryption key management and secure data protection across cloud environments.

In our case, we use AWS KMS to encrypt data stored in Amazon S3, EBS volumes, RDS databases, Parameter Store SecureStrings, and Lambda environment variables. Rather than managing encryption keys separately for each application, KMS lets us centrally handle key creation, rotation, access permissions, and auditing.

Overall, this approach streamlines compliance requirements while helping ensure sensitive business data stays protected. Review collected by and hosted on G2.com.