Using Customer Managed Keys with DataFlow

By default, DataFlow uses your account level KMS key for EBS storage encryption. You can optionally secure your data with a custom KMS key.

You have two options to implement Customer Managed Keys (CMKs):
  • define a new default KMS key for EBS encryption on AWS account level
  • define a key on CDF environment level