| Option | AWS_KMS_KEY_ARN | |
| Description |
Amazon Resource Name (ARN) of the Key Management Service (KMS) key
for Amazon Web Services (AWS). This parameter enables secure
encryption/decryption operations and can be used as an alternative
authentication method to AWS_ACCESS_KEY_ID when
integrated with IAM roles.
| |
KMS keys provide centralized encryption key management with fine-grained access control and audit capabilities.
KMS key ARNs follow the format
arn:aws:kms:region:account-id:key/key-id. Some
examples of keys are:
arn:aws:kms:us-east-1:123456789012:key/12345678-1234-1234-1234-123456789012
and
arn:aws:kms:eu-west-1:123456789012:key/alias/my-encryption-key.
For more information about AWS configuration for bucket storage and archiving, see Amazon Bucket Storage and S3 Archiving.