Key Management Service

Encrypted Keys Creation

User Master Key: Users can use the management console or APIs to produce a master key. It is mainly used to encrypt and protect data keys and produce envelopes, or directly encrypt/decrypt a small volume of data (<4KB).

Data key: You can use APIs to create data keys and encrypt huge volumes of local business data.

Encrypt/Decrypt Data

Data encryption/decryption is the core business of KMS service. In practice, it is mainly used to protect sensitive data stored in the server’s hard disks.

Envelope Encryption

Envelope encryption is a security solution for protecting mass volumes of business data. KMS is able to guarantee the security of data keys and subsequently, security of business data.

Key Management

Besides producing encrypted keys and encrypting/decrypting data, KMS provides users with many other management functions; for example, users can disable or activate keys, schedule deletion or cancel deletion schedules, and view detailed information of keys.