Skip to main content
This section shows how to create a key in your AWS External key store. This key is a logical link to the key created in the CryptoHub XKS service. Perform the following steps:
1
Go to the External key store you created in the AWS Management Console.
2
Select [ Create a KMS key in this key store ].
3
To configure key for external key store, perform the following steps:
  1. Enter the External key ID you set when creating the key inside the Amazon XKS service on the CryptoHub.
  2. Check the box to Confirm use of external key store.
4
To add labels, enter a custom alias for the key. It is the name for the key inside AWS, but it can be different than the key name in the Amazon XKS service on the CryptoHub. AWS uses the key ID to reach the key, not the alias label.
5
(Optional) To define permissions, configure the key administrative and usage permissions as needed. For testing, ensure the user performing the testing has permissions to administer and use the key.
6
Select [ Finish ].
If the key is created successfully, you see it under Customer managed keys with Enabled status.Select the new key and note the ARN/Key ID. You can use it in end-to-end tests in AWS CLI.