Create a key in your AWS External key store

this section shows how to create a key in your aws external key store this key is a logical link to the key created in the {{ch}} xks service perform the following steps go to the external key store you created in the aws management console select \[ create a kms key in this key store ] to configure key for external key store, perform the following steps enter the external key id you set when creating the key inside the amazon xks service on the {{ch}} check the box to confirm use of external key store to add labels, enter a custom alias for the key it is the name for the key inside aws, but it can be different than the key name in the amazon xks service on the {{ch}} aws uses the key id to reach the key, not the alias label (optional) to define permissions, configure the key administrative and usage permissions as needed for testing, ensure the user performing the testing has permissions to administer and use the key select \[ finish ] if the key is created successfully, you see it under customer managed keys with enabled status select the new key and note the arn/key id you can use it in end to end tests in aws cli