Using Customer Managed Keys with DataFlow
By default, DataFlow uses your account level KMS key for EBS storage encryption. You can optionally secure your data with a custom KMS key.
You have two options to implement Customer Managed Keys (CMKs):
- define a new default KMS key for EBS encryption on AWS account level
- define a key on CDF environment level