What Functions Does DEW Provide?

Key Management Service

• On the KMS console, you can perform the following operations on CMKs:
  • Creating, querying, enabling, disabling, scheduling the deletion of, and canceling the deletion of CMKs
  • Modifying the alias and description of CMKs
  • Using the online tool to encrypt and decrypt small volumes of data
  • Adding, searching for, editing, and deleting tags
  • Creating, canceling, and querying grants
• You can use the API to perform the following operations:
  • Creating, encrypting, or decrypting data encryption keys (DEKs)
  • Retiring grants
  • Signing or verifying the signature of messages or message digests

  For details, see the Data Encryption Workshop API Reference.

• Generate hardware true random number.

  You can generate 512-bit random numbers using the KMS API. The 512-bit hardware true random numbers can be used as or serve as basis for key materials and encryption parameters. For details, see the Data Encryption Workshop API Reference.