Encryption key requirements
If planning to use encryption, ensure that your encryption key can be used with Cloudbreak or if you need to create a new encryption key.
Ensuring that an existing encryption key can be used with Cloudbreak
If you have an existing encryption key that you would like to use with Cloudbreak, make sure that the following are attached as both key administrator and key user:
- The AWSServiceRoleForAutoScaling built-in role.
- Your IAM role or IAM user used for the Cloudbreak credential.
To check that these are attached, navigate to the IAM console > Encryption keys, select your encryption key, and scroll to Key Administrators and then Key Users.
Create a new encryption key on AWS
To create a new encryption key, follow these steps:
- On AWS, navigate to the IAM console.
- Select Encryption keys.
- From the Region dropdown, select the region in which you would like to create and use the encryption key.
- Click Create key:
- In Step 1: Create Alias and Description:
- Enter an Alias for your key.
- Expand Advanced Options and under Key Material Origin, select “KMS” or “External”.
- In Step 3: Define Key Administrative Permissions, select the following:
- AWSDerviceRoleForAutoScaling built-in role.
- Your IAM user (if using role-based credential) or IAM role (if using key-based credential).
- In Step 4: Define Key Usage Permissions, select the same items as in the previous steps.
- Navigate to the last page of the wizard and then click Finish to create an encryption key.