Creating a KMS service

Login to AWS console
Go to KSM service
Click on Create a key
Under Configure key:
1. Key type – Symmetric
2. Advanced options
  1. Key material origin – KMS
3. Click Next
Under Add labels:
1. Alias – CMK
2. Click Next
Under Define key administrative permissions
1. Key administrators – select KeyManager user (created in previous lab)
2. Click Next
Define key usage permissions
1. Key administrators – select KeyManager user (created in previous lab)
2. Click Next
Click Finish