Tag: KMS

KMS aliases are a great way to make KMS keys more convenient. But permitting one account to use an KMS key in another account through a KMS alias can be difficult. This article explains why, and how to solve the problem correctly. Let’s start with the example shown in the diagram above. Account B has…