AWS KMS Encryption Patterns

CLI

aws kms decrypt...
aws kms encrypt...
  • In the background, KMS will do the following Pasted image 20221019214904.png
  • KMS Encrypt API has a limit of 4KB. Everything that > 4KB, we need to use Envelope Encryption