Yeah, this stuff isn't secret. Note how if you encrypt your S3 bucket it uses a KMS CMK; that's an dependency between S3 and KMS, and yep it's the same KMS. Thi

Yeah, this stuff isn't secret. Note how if you encrypt your S3 bucket it uses a KMS CMK; that's an dependency between S3 and KMS, and yep it's the same KMS. This is true for probably over a hundred AWS services that rely on KMS; it's a "foundational" service. (As is S3.)