How to create a custom key store in AWS KMS

Question

Hi Guys,

I am new to AWS. I want to create a custom key in AWS KMS. How can I do that using the CLI command?

Answer 1

Hi@akhtar,

AWS Key Management Service (KMS) makes it easy for you to create and manage cryptographic keys and control their use across a wide range of AWS services and in your applications. You can create a custom key store that is associated with an AWS CloudHSM cluster that you own and manage. The following create-custom-key-store example creates a custom key store with an existing custom key store.

$ aws kms create-custom-key-store --custom-key-store-name ExampleKeyStore --cloud-hsm-cluster-id cluster-1a23b4cdefg --key-store-password kmsPswd --trust-anchor-certificate file://customerCA.crt