Related Services

KMS provides CMK management and encryption capabilities for cloud services. The following table lists the cloud services that can use KMS for encryption.

**Table 1** Cloud services supported by KMS
Service	How to Use	Reference
Object Storage Service (OBS)	You can upload objects to and download them from OBS in common mode or server-side encryption mode. When you upload objects in encryption mode, data is encrypted at the server side and then securely stored on OBS in ciphertext. When you download encrypted objects, the data in ciphertext is decrypted at the server side and then provided to you in plaintext. OBS supports the server-side encryption with KMS-managed keys (SSE-KMS). In this mode, OBS uses the keys provided by KMS for server-side encryption.	Object Storage Service Console Operation Guide
Elastic Volume Service (EVS)	If you enable the encryption function when creating an EVS disk, the disk will be encrypted with the DEK generated by using your CMK. Data stored in the EVS disk will be automatically encrypted.	Elastic Volume Service User Guide
Image Management Service (IMS)	When creating a private image using an external image file, you can enable the private image encryption function and select a CMK provided by KMS to encrypt the image.	Image Management Service User Guide
Scalable File Service (SFS)	When creating a file system on SFS, the CMK provided by KMS can be selected to encrypt the file system, so that files stored in the file system are automatically encrypted.	Scalable File Service User Guide
Relational Database Service (RDS)	When purchasing a database instance, you can enable the disk encryption function of the database instance and select a CMK created on KMS to encrypt the disk of the database instance. Enabling the disk encryption function will enhance data security.	Relational Database Service User Guide
Document Database Service (DDS)	When purchasing a DDS instance, you can enable the disk encryption function of the instance and select a CMK created on KMS to encrypt the disk of the instance. Enabling the disk encryption function will enhance data security.	Document Database Service User Guide

CTS

CTS provides you with a history of DEW operations. After the CTS service is enabled, you can view all generated traces to review and audit performed KMS operations. For details, see the Cloud Trace Service User Guide.

IAM

IAM provides permission management for DEW.

Only users who have KMS Administrator permissions can use DEW.

To apply for permissions, contact a user with Security Administrator permissions. For details, see Identity and Access Management User Guide.

SMN

Simple Message Notification (SMN) provides the notification function. When a selected event is triggered for the target secret, CSMS sends a notification through SMN.

Parent topic: Service Overview

Previous topic: Permissions Management

Next topic: Basic Concepts