Functions

KMS provides the following functions:

• Manages CMKs.
  Using the KMS console or APIs, you can perform the following operations on CMKs:

  • Creating, querying, enabling, disabling, scheduling the deletion of, and canceling the deletion of CMKs
  • Importing CMKs and deleting CMK material
  • Modifying the aliases and description of CMKs
  • Enabling key rotation

• Creates, encrypts, and decrypts DEKs.

  You can create, encrypt, and decrypt a DEK by calling KMS APIs. For details, see the Key Management Service API Reference.

• Generates hardware true random numbers.

  You can generate 512-bit hardware true random numbers using a KMS API. The 512-bit hardware true random numbers can be used as or serve as basis for keys and encryption parameters. For details, see the Key Management Service API Reference.