Technical Glossary
AWS Key Management Service (KMS)
Exact Definition
AWS Key Management Service (KMS) is a secure, managed service that makes it easy for developers to create and control cryptographic keys used to encrypt database columns, files, and server variables.
Architectural Deep Dive
AWS KMS secures encryption keys using hardware security modules (HSMs). KMS handles key rotation, access logs, and policy controls, ensuring that even if database backups are leaked, they cannot be decrypted without verified IAM authorization.
The ERPStack Approach
We use AWS KMS to encrypt database columns at the application layer, guaranteeing complete data confidentiality for HIPAA and SOC2 compliance.