Ravi Sir's Cards › AWS
Who owns the key policy?
This comparison card contrasts Who owns the key policy. Customer managed key (CMK): You set key policy, rotation, grants, aliases. AWS managed key is described as aWS manages the key. It also notes simpler, less control. The card pairs Customer managed key (CMK) with prod and regulated data, and AWS managed key with low-risk defaults.
Read card text
What this card says
Who owns the key policy?
Customer managed key (CMK)
You set key policy, rotation, grants, aliases.
AWS managed key
AWS manages the key; simpler, less control.
Key points
Prod secrets with compliance evidence.
Dev toys and quick starts.
Example
alias/prod-secrets CMK / aws/secretsmanager managed
Use when
Prod and regulated data.
Low-risk defaults.