🧰 AWS KMS

The items that name it 10

• Quantum-resistant signing on AWS, Part 2: Enforce your ML-DSA algorithm policy with SCPs and IAM
  articleas classification.technologies2026-10-12
• Quantum-resistant signing on AWS, Part 1: Build a software supply chain with ML-DSA
  articleas classification.technologies2026-10-12
• Improving SPIRE security and resiliency with AWS managed services
  articleas tools2026-10-06

  SPIRE Key Manager plugin for signing SVIDs using FIPS 140-3 Level 2 validated HSMs, with SigV4-authenticated, CloudTrail-audited requests and fine-grained key policies

• ICYMI: August 2026 @AWS Security
  articleas tools2026-09-23

  data key caching for per-tenant envelope encryption at scale

• Architecting resilient authentication with Amazon Cognito multi-Region replication
  articleas classification.technologies2026-09-15
• AWSHound: An Open-Source AWS OpenGraph Collector
  writeupas affected products2026-08-19

  Default key policy, aliases, grants, rotation state; same-account-only collection; fails closed if key policy cannot be collected

• A few notes on AWS Nitro Enclaves: KMS integration
  writeupas tools2026-08-05It is written here as AWS KMS (Key Management Service).

  Unified public API for creating/managing keys backed by HSMs; supports CMKs, data keys, data key pairs; verifies attestation documents from enclaves

• AWS Well-Architected: Software Supply Chain Security
  articleas tools2026-06-04

  Encryption for centralized container image storage in Amazon ECR

• State of Post Quantum Cryptography | Wiz Blog
  articleas affected products2026-05-28

  Supports ML-DSA keys and signing

• Alice and Bob Learn Secure Coding: Chapter 2
  videoas classification.technologies2026-05-11It is written here as AWS KMS: Key management service for managing cryptographic keys and secrets.