Tag: kms

Security & Compliance
Apr 28, 2026 · Palaniappan P · 9 min read
AWS EBS Encryption and Snapshot Hygiene: Default Encryption, Public Snapshot Prevention, and KMS Key Lifecycle
A practical guide to EBS at-rest encryption — account-level default encryption, re-encrypting legacy unencrypted volumes, blocking public snapshots, and operating the KMS key lifecycle without losing data to accidental deletion.
Security & Compliance
Apr 28, 2026 · Palaniappan P · 8 min read
AWS KMS Post-Quantum Cryptography: ML-KEM Hybrid TLS and ML-DSA Signatures in Production
AWS KMS, ACM, and Secrets Manager now support ML-KEM hybrid TLS and ML-DSA digital signatures. This guide covers when to enable post-quantum cryptography, how to configure it across the AWS SDK and TLS clients, performance tradeoffs, and how to plan the migration for long-lived data.