3 ms·
One idea is to audit the use of the encryption key.
by dmourati 12y ago
One idea is to audit the use of the encryption key.
- wiredfool 12y agoI'm curious how one could implement dual control of keys on Amazon, or if auditing would have ot be a compensating control for it.
- jeffbarr 12y agoCalls made to KMS are logged in CloudTrail where they can be used for auditing.
- toomuchtodo 12y agoI'm assuming CloudTrail logs can be sent to another AWS account with no delete access from the sending account?