Access a KMS-Encrypted Secret

Your Apono connector can read AWS secrets encrypted with Key Management Service (KMS). KMS-encrypted secrets offer several benefits:

• Enhance security with strong encryption
• Easily manage access to secrets using Identity Access Management (IAM) and KMS key policies
• Record who has accessed your secrets, and when, with KMS' built-in auditing
• Meet regulatory and compliance requirements by leveraging KMS encryption for sensitive data

📘

For more information on KMS encryption, see Amazon’s documentation.

Prerequisite

Access a KMS-encrypted secret

Follow these steps to enable your Apono connector to read a KMS-encrypted secret:

1. From the KMS main navigation, click Customer managed keys. A table appears with all self-managed keys.

2. Select the key of an Apono-connected secret. The key configuration page appears.

3. Under the Tags tab, click Add tag. A key-value editor appears.

4. Add the following tag to your KMS encryption key:

   Tag key	apono-connector-access
   Tag value	true

5. Click Save.

Your Apono connector can now read your AWS secret with KMS.