<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>AWS Key Management Service* &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/aws-key-management-service/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Mon, 12 Oct 2026 20:13:06 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.3</generator>
	<item>
		<title>Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM</title>
		<link>https://noise.getoto.net/2026/10/12/quantum-resistant-signing-on-aws-part-2-enforce-your-ml-dsa-algorithm-policy-with-scps-and-iam/</link>
		
		<dc:creator><![CDATA[Harshvardhan Chunawala]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 20:13:06 +0000</pubDate>
				<category><![CDATA[Amazon Elastic Container Registry]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Inspector]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[AWS CLI]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Private Certificate Authority]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[AWS Security Token Service]]></category>
		<category><![CDATA[AWS Systems Manager]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[Configuration, compliance, and auditing]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Quantum Technologies]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[supply chain]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=2ec4592b66fc3670c2c6af380eb5149f</guid>

					<description><![CDATA[You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business needs, balancing security against signature size, key […]]]></description>
		
		
		
			</item>
		<item>
		<title>Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA</title>
		<link>https://noise.getoto.net/2026/10/12/quantum-resistant-signing-on-aws-part-1-build-a-software-supply-chain-with-ml-dsa/</link>
		
		<dc:creator><![CDATA[Harshvardhan Chunawala]]></dc:creator>
		<pubDate>Mon, 12 Oct 2026 20:12:53 +0000</pubDate>
				<category><![CDATA[Amazon Elastic Container Registry]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Inspector]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[AWS CLI]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Key Management Service (KMS)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Organizations]]></category>
		<category><![CDATA[AWS Private Certificate Authority]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[AWS Security Token Service]]></category>
		<category><![CDATA[AWS Systems Manager]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[Configuration, compliance, and auditing]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Quantum Technologies]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[supply chain]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=bb3c2bdddd32bc9bc01abf46f29c3573</guid>

					<description><![CDATA[Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital signature algorithms, and today many use traditional algorithms such as Rivest-Shamir-Adleman (RSA) and the Elliptic Curve […]]]></description>
		
		
		
			</item>
		<item>
		<title>Implementing customer managed keys for AWS Lambda durable functions with Terraform</title>
		<link>https://noise.getoto.net/2026/09/29/implementing-customer-managed-keys-for-aws-lambda-durable-functions-with-terraform/</link>
		
		<dc:creator><![CDATA[Rajdeep Banerjee]]></dc:creator>
		<pubDate>Tue, 29 Sep 2026 17:14:00 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=5484e97a812b55fa0bfd137ee499548f</guid>

					<description><![CDATA[Lambda durable functions checkpoint execution state to durable storage, and for regulated payment workloads that data is sensitive. This post shows how to configure a customer managed key in AWS KMS to encrypt durable execution data, define a least-privilege key policy, and verify encryption through AWS CloudTrail, all deployed with Terraform.]]></description>
		
		
		
			</item>
		<item>
		<title>Caching KMS data keys in multi-thread environments: Per-tenant encryption for event-driven systems at scale</title>
		<link>https://noise.getoto.net/2026/08/06/caching-kms-data-keys-in-multi-thread-environments-per-tenant-encryption-for-event-driven-systems-at-scale/</link>
		
		<dc:creator><![CDATA[Maria Gutovsky]]></dc:creator>
		<pubDate>Thu, 06 Aug 2026 16:16:06 +0000</pubDate>
				<category><![CDATA[AWS Encryption SDK]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[Customer Solutions]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=da948ae8ef5430b94fc13e7baaf7416c</guid>

					<description><![CDATA[This post assumes familiarity with envelope encryption and the AWS Encryption SDK. When your encryption system generates millions of duplicate API calls per hour, costs spiral and performance degrades. That’s exactly the challenge NICE Actimize faced while operating their global-scale, event-driven financial crime detection platform on Amazon Web Services (AWS). NICE Actimize, a leading provider […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>AWS KMS or AWS CloudHSM: Choose the right key management solution</title>
		<link>https://noise.getoto.net/2026/07/28/aws-kms-or-aws-cloudhsm-choose-the-right-key-management-solution/</link>
		
		<dc:creator><![CDATA[Derek Tumulak]]></dc:creator>
		<pubDate>Tue, 28 Jul 2026 18:55:43 +0000</pubDate>
				<category><![CDATA[AWS CloudHSM]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=f58cc7d9b7c504986467db3656e27923</guid>

					<description><![CDATA[Choosing the right cryptographic key management service on Amazon Web Services (AWS) starts with understanding the difference between AWS Key Management Service (AWS KMS) and AWS CloudHSM. Both provide key storage backed by a hardware security module (HSM) but serve very different needs. AWS KMS is a fully managed service that integrates with all AWS […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Deploy modern data platforms in minutes with MDAA</title>
		<link>https://noise.getoto.net/2026/07/02/deploy-modern-data-platforms-in-minutes-with-mdaa/</link>
		
		<dc:creator><![CDATA[Sudeshna Dash]]></dc:creator>
		<pubDate>Thu, 02 Jul 2026 16:26:28 +0000</pubDate>
				<category><![CDATA[Amazon Athena]]></category>
		<category><![CDATA[Amazon Bedrock]]></category>
		<category><![CDATA[Amazon CloudWatch]]></category>
		<category><![CDATA[Amazon EMR]]></category>
		<category><![CDATA[Amazon Kinesis]]></category>
		<category><![CDATA[Amazon Managed Streaming for Apache Kafka (Amazon MSK)]]></category>
		<category><![CDATA[Amazon Redshift]]></category>
		<category><![CDATA[Amazon SageMaker Lakehouse]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[AWS CloudTrail]]></category>
		<category><![CDATA[AWS Glue]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Lake Formation]]></category>
		<category><![CDATA[AWS Lambda]]></category>
		<category><![CDATA[Customer Solutions]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Partner solutions]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=26439facede8e2110aaf3efa4f30e0ab</guid>

					<description><![CDATA[In this post, we explore how MDAA transforms data architecture development from months of manual coding to production-ready deployment through configuration-driven infrastructure and embedded governance, examine a real customer transformation, and provide a clear implementation pathway for your own data modernization journey.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Identify unused AWS KMS keys and prevent accidental key deletions</title>
		<link>https://noise.getoto.net/2026/06/02/identify-unused-aws-kms-keys-and-prevent-accidental-key-deletions/</link>
		
		<dc:creator><![CDATA[Andrea Rossi]]></dc:creator>
		<pubDate>Tue, 02 Jun 2026 19:01:54 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Cloud Cost Optimization]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=ce59bda2103ba2ab6185903d4d277baa</guid>

					<description><![CDATA[As you scale your use of Amazon Web Services (AWS), managing KMS keys becomes increasingly important. Whether you manage a handful of keys or thousands across multiple AWS accounts and AWS Regions, there’s often a need to audit key usage to help you meet compliance requirements, evaluate your risk posture, and optimize key management costs. […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Security posture improvement in the AI era</title>
		<link>https://noise.getoto.net/2026/05/01/security-posture-improvement-in-the-ai-era/</link>
		
		<dc:creator><![CDATA[Celeste Bishop]]></dc:creator>
		<pubDate>Fri, 01 May 2026 20:58:39 +0000</pubDate>
				<category><![CDATA[Amazon Bedrock]]></category>
		<category><![CDATA[Amazon Bedrock AgentCore]]></category>
		<category><![CDATA[Amazon GuardDuty]]></category>
		<category><![CDATA[Amazon Inspector]]></category>
		<category><![CDATA[artificial intelligence]]></category>
		<category><![CDATA[AWS Config]]></category>
		<category><![CDATA[AWS IAM Access Analyzer]]></category>
		<category><![CDATA[AWS Key Management Service (KMS)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Network Firewall]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[AWS Security Hub]]></category>
		<category><![CDATA[AWS WAF]]></category>
		<category><![CDATA[generative AI]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security & Governance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=dd8d0baaccefbfbb7fddb17f491a49e5</guid>

					<description><![CDATA[It’s only been a few weeks since Anthropic announced the Claude Mythos Preview model and launched Project Glasswing with AWS and other leading organizations. This has generated a lot of discussion about the future of cybersecurity and what the ever-increasing capabilities of foundation models mean to organizations. As AWS CISO Amy Herzog pointed out in […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Digital Transformation at Santander: How Platform Engineering is Revolutionizing Cloud Infrastructure</title>
		<link>https://noise.getoto.net/2026/02/26/digital-transformation-at-santander-how-platform-engineering-is-revolutionizing-cloud-infrastructure/</link>
		
		<dc:creator><![CDATA[Julio Bando]]></dc:creator>
		<pubDate>Thu, 26 Feb 2026 17:54:12 +0000</pubDate>
				<category><![CDATA[Amazon Bedrock]]></category>
		<category><![CDATA[Amazon Elastic Kubernetes Service]]></category>
		<category><![CDATA[Amazon Machine Learning]]></category>
		<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[artificial intelligence]]></category>
		<category><![CDATA[AWS Identity and Access Management (IAM)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Customer Solutions]]></category>
		<category><![CDATA[generative AI]]></category>
		<category><![CDATA[Partner solutions]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=646e4ed55dd3868cd2e2adc96ecbf362</guid>

					<description><![CDATA[Santander faced a significant technical challenge in managing an infrastructure that processes billions of daily transactions across more than 200 critical systems. The solution emerged through an innovative platform engineering initiative called Catalyst, which transformed the bank's cloud infrastructure and development management. This post analyzes the main cases, benefits, and results obtained with this initiative.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Secure Apache Spark writes to Amazon S3 on Amazon EMR with dynamic AWS KMS encryption</title>
		<link>https://noise.getoto.net/2026/01/27/secure-apache-spark-writes-to-amazon-s3-on-amazon-emr-with-dynamic-aws-kms-encryption/</link>
		
		<dc:creator><![CDATA[Pinxi Tai]]></dc:creator>
		<pubDate>Tue, 27 Jan 2026 17:45:38 +0000</pubDate>
				<category><![CDATA[Amazon EMR]]></category>
		<category><![CDATA[Analytics]]></category>
		<category><![CDATA[Apache Spark]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=3baa10bac43dfb6f5a729ef5879b0112</guid>

					<description><![CDATA[When processing data at scale, many organizations use Apache Spark on Amazon EMR to run shared clusters that handle workloads across tenants, business units, or classification levels. In such multi-tenant environments, different datasets often require distinct AWS Key Management Service (AWS KMS) keys to enforce strict access controls and meet compliance requirements. At the same […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Post-quantum (ML-DSA) code signing with AWS Private CA and AWS KMS</title>
		<link>https://noise.getoto.net/2025/11/17/post-quantum-ml-dsa-code-signing-with-aws-private-ca-and-aws-kms/</link>
		
		<dc:creator><![CDATA[Panos Kampanakis]]></dc:creator>
		<pubDate>Mon, 17 Nov 2025 19:40:02 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Certificate Manager]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[AWS Private CA]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=9d803731525ebc6a269c2d208a79cfdd</guid>

					<description><![CDATA[Following our recent announcement of ML-DSA support in AWS Key Management Service (AWS KMS), we just introduced post-quantum ML-DSA signature support in AWS Private Certificate Authority (AWS Private CA). Customers can use AWS Private CA to create and manage their own private public key infrastructure (PKI) hierarchies. Through this integration, you can establish and use […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Migrate encrypted Amazon EC2 instances across AWS Regions without sharing AWS KMS keys</title>
		<link>https://noise.getoto.net/2025/10/16/migrate-encrypted-amazon-ec2-instances-across-aws-regions-without-sharing-aws-kms-keys/</link>
		
		<dc:creator><![CDATA[Rakesh Mannepalli]]></dc:creator>
		<pubDate>Wed, 15 Oct 2025 21:33:51 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[Amazon EC2]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=55ff3da90cf0136fd5e8f96cee8dcd2a</guid>

					<description><![CDATA[When migrating Amazon EC2 instances with encrypted Amazon EBS volumes across AWS Regions with in the same account or a different account, you face a particular challenge: AWS KMS keys are AWS Region-specific and cannot be shared across AWS Regions. This post provides a step-by-step approach to successfully migrate your encrypted EC2 instances without compromising your security posture by sharing your KMS keys.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>AWS IAM Identity Center now supports customer-managed KMS keys for encryption at rest</title>
		<link>https://noise.getoto.net/2025/10/06/aws-iam-identity-center-now-supports-customer-managed-kms-keys-for-encryption-at-rest/</link>
		
		<dc:creator><![CDATA[Sébastien Stormacq]]></dc:creator>
		<pubDate>Mon, 06 Oct 2025 19:52:06 +0000</pubDate>
				<category><![CDATA[announcements]]></category>
		<category><![CDATA[AWS IAM Identity Center]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[launch]]></category>
		<category><![CDATA[news]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=3b90d7fcaa94d99e6ebddc18100b641a</guid>

					<description><![CDATA[Gain control over encryption and comply with regulations using customer-managed keys for AWS IAM Identity Center's user data and passwords.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Simplify multi-tenant encryption with a cost-conscious AWS KMS key strategy</title>
		<link>https://noise.getoto.net/2025/08/22/simplify-multi-tenant-encryption-with-a-cost-conscious-aws-kms-key-strategy/</link>
		
		<dc:creator><![CDATA[Itay Meller]]></dc:creator>
		<pubDate>Thu, 21 Aug 2025 21:54:51 +0000</pubDate>
				<category><![CDATA[Advanced (300)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Cloud Cost Optimization]]></category>
		<category><![CDATA[SaaS]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=492071f386f125a65049c8164c6521ac</guid>

					<description><![CDATA[In this post, we explore an efficient approach to managing encryption keys in a multi-tenant SaaS environment through centralization, addressing challenges like key proliferation, rising costs, and operational complexity across multiple AWS accounts and services. We demonstrate how implementing a centralized key management strategy using a single AWS KMS key per tenant can maintain security and compliance while reducing operational overhead as organizations scale.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to create post-quantum signatures using AWS KMS and ML-DSA</title>
		<link>https://noise.getoto.net/2025/06/13/how-to-create-post-quantum-signatures-using-aws-kms-and-ml-dsa/</link>
		
		<dc:creator><![CDATA[Jake Massimo]]></dc:creator>
		<pubDate>Fri, 13 Jun 2025 18:11:30 +0000</pubDate>
				<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[Expert (400)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=caa1794c21a1173ca393ab0eb4a456e4</guid>

					<description><![CDATA[As the capabilities of quantum computing evolve, AWS is committed to helping our customers stay ahead of emerging threats to public-key cryptography. Today, we’re announcing the integration of FIPS 204: Module-Lattice-Based Digital Signature Standard (ML-DSA) into AWS Key Management Service (AWS KMS). Customers can now create and use ML-DSA keys through the same familiar AWS […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>How to use on-demand rotation for AWS KMS imported keys</title>
		<link>https://noise.getoto.net/2025/06/06/how-to-use-on-demand-rotation-for-aws-kms-imported-keys/</link>
		
		<dc:creator><![CDATA[Jeremy Stieglitz]]></dc:creator>
		<pubDate>Fri, 06 Jun 2025 18:03:27 +0000</pubDate>
				<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=748374ee33abecac23c69f6c100573aa</guid>

					<description><![CDATA[Today, we’re announcing support for on-demand rotation of symmetric encryption AWS Key Management Service (AWS KMS) keys with imported key material (EXTERNAL origin). This new capability enables you to rotate the cryptographic key material of these keys without changing the key identifier (key ID or Amazon Resource Name (ARN)). Rotating keys helps you meet compliance […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>ML-KEM post-quantum TLS now supported in AWS KMS, ACM, and Secrets Manager</title>
		<link>https://noise.getoto.net/2025/04/07/ml-kem-post-quantum-tls-now-supported-in-aws-kms-acm-and-secrets-manager/</link>
		
		<dc:creator><![CDATA[Alex Weibel]]></dc:creator>
		<pubDate>Mon, 07 Apr 2025 18:55:02 +0000</pubDate>
				<category><![CDATA[ACM]]></category>
		<category><![CDATA[AWS Certificate Manager]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS Secrets Manager]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=15d89e9af559660ddd689702cb9bae25</guid>

					<description><![CDATA[Amazon Web Services (AWS) is excited to announce that the latest hybrid post-quantum key agreement standards for TLS have been deployed to three AWS services. Today, AWS Key Management Service (AWS KMS), AWS Certificate Manager (ACM), and AWS Secrets Manager endpoints now support Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM) for hybrid post-quantum key agreement in non-FIPS endpoints […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>AWS KMS CloudWatch metrics help you better track and understand how your KMS keys are being used</title>
		<link>https://noise.getoto.net/2025/03/17/aws-kms-cloudwatch-metrics-help-you-better-track-and-understand-how-your-kms-keys-are-being-used/</link>
		
		<dc:creator><![CDATA[Norman Li]]></dc:creator>
		<pubDate>Mon, 17 Mar 2025 17:35:16 +0000</pubDate>
				<category><![CDATA[AWS Key Management Service (KMS)]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[Best practices]]></category>
		<category><![CDATA[Intermediate (200)]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[Technical How-to]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=36c18aabae7b3f0289eda9750102394f</guid>

					<description><![CDATA[AWS Key Management Service (AWS KMS) is pleased to launch key-level filtering for AWS KMS API usage in Amazon CloudWatch metrics, providing enhanced visibility to help customers improve their operational efficiency and aid in security and compliance risk management. AWS KMS currently publishes account-level AWS KMS API usage metrics to Amazon CloudWatch, enabling you to monitor […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>The importance of encryption and how AWS can help</title>
		<link>https://noise.getoto.net/2025/02/12/the-importance-of-encryption-and-how-aws-can-help/</link>
		
		<dc:creator><![CDATA[Ken Beer]]></dc:creator>
		<pubDate>Wed, 12 Feb 2025 19:18:47 +0000</pubDate>
				<category><![CDATA[aes]]></category>
		<category><![CDATA[AWS CloudHSM]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[AWS KMS]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[Foundational (100)]]></category>
		<category><![CDATA[Key management]]></category>
		<category><![CDATA[openssl]]></category>
		<category><![CDATA[s2n]]></category>
		<category><![CDATA[Security Blog]]></category>
		<category><![CDATA[Security, Identity & Compliance]]></category>
		<category><![CDATA[TLS]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=6b326a97a1de81e6d46682ccc3f86cb6</guid>

					<description><![CDATA[February 12, 2025: This post was republished to include new services and features that have launched since the original publication date of June 11, 2020. Encryption is a critical component of a defense-in-depth security strategy that uses multiple defensive mechanisms to protect workloads, data, and assets. As organizations look to innovate while building trust with […]]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Amazon S3 Express One Zone now supports AWS KMS with customer managed keys</title>
		<link>https://noise.getoto.net/2024/09/18/amazon-s3-express-one-zone-now-supports-aws-kms-with-customer-managed-keys/</link>
		
		<dc:creator><![CDATA[Elizabeth Fuentes]]></dc:creator>
		<pubDate>Tue, 17 Sep 2024 21:15:56 +0000</pubDate>
				<category><![CDATA[Amazon Simple Storage Service (S3)]]></category>
		<category><![CDATA[announcements]]></category>
		<category><![CDATA[AWS Key Management Service*]]></category>
		<category><![CDATA[launch]]></category>
		<category><![CDATA[news]]></category>
		<guid isPermaLink="false">http://noise.getoto.net/?guid=c45e86f634e206fba147f7d06af1a906</guid>

					<description><![CDATA[Secure your mission-critical data with S3 Express One Zone's server-side encryption using KMS keys, combining top-notch performance and robust security for regulatory compliance.]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/?utm_source=w3tc&utm_medium=footer_comment&utm_campaign=free_plugin

Object Caching 23/195 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2026-10-27 15:32:11 by W3 Total Cache
-->