3 ms·
What actually keeps your keys secure from AWS if you use KMS? That’s my problem with it.
by zxd1098 9y ago
What actually keeps your keys secure from AWS if you use KMS? That’s my problem with it.
- autrilla 9y agoIf you care about this, you can use Shamir Secret Sharing to require two (or more) keys to recover the encrypted file. So even if AWS was malicious, they still wouldn't be able to get the file without your other key (presumably a GPG or GCP KMS key)