Skip to main content
Verify your environment meets these requirements.

​
Supported hardware

  • CryptoHub, 7.0.3.x or later.
You must configure the CryptoHub Dashboard connection with a TLS certificate issued by a publicly trusted Certificate Authority.

​
Required access

  • An account on the CryptoHub with administrator permissions to deploy new services.
  • An AWS IAM role assigned the AWSKeyManagementServicePowerUser AWS-managed policy, along with the customer-managed policy below, which grants additional permissions needed to test XKS end-to-end:
JSON
{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "XksCustomKeyStoreAdmin",
      "Effect": "Allow",
      "Action": [
        "kms:CreateCustomKeyStore",
        "kms:DescribeCustomKeyStores",
        "kms:ConnectCustomKeyStore",
        "kms:DisconnectCustomKeyStore",
        "kms:UpdateCustomKeyStore",
        "kms:DeleteCustomKeyStore"
      ],
      "Resource": "*"
    }
  ]
}