Kevin Kevin

Authorization to your key involves a mix of key policies, IAM policies, grants, SCPs, and VPC endpoint policies — each playing a distinct role in access decisions. This talk demystifies how these policies are evaluated in the context of AWS KMS, then applies that understanding to create a scalable policy design.

Cryptography is changing fast. The dedicated HSM you rely on today, whether AWS CloudHSM or an on-premises appliance, carries operational overhead that will only grow as the industry moves toward post-quantum cryptography (PQC) and stricter digital sovereignty requirements.

Data privacy and sovereignty requirements continue to drive cloud security innovation. This deep dive session traces AWS Key Management Service (AWS KMS) evolution since inception; from solving fundamental key management challenges to supporting complex regulatory and compliance requirements.