KMS Keys
Use KMS keys for resource encryption
DuploCloud allows you to configure Tenant and Plan level KMS (Key Management Service) keys for AWS/Azure resources. These keys can be selected when creating supported resources to ensure consistent encryption and help meet compliance requirements.
Adding a KMS Key for a Plan
Plan-level KMS keys can be used for encrypting resources in any Tenant under the selected Plan.
Navigate to Administrator -> Plans.
Select the Plan from the NAME column.
Select the KMS tab.
Click Add. The Add a Kms Key pane displays.
Add a Kms Key pane Complete the following fields:
Key Name
Enter a friendly name for the key (e.g., test-key)
Key Id
Enter the cloud provider–specific key ID (AWS KMS Key ID or Azure Key Vault Key ID).
Key Arn
Enter the cloud provider–specific key ARN or resource ID. For AWS this is the KMS Key ARN; for Azure, this is the Key Vault Key ID URI.
Click Submit to add the key to the Plan. Once added, the key can be selected when creating supported resources in the Plan, such as databases, compute instances, storage resources, and other services.
Adding a KMS Key for a Tenant
Tenant-level KMS keys can be used for encrypting resources only within the selected tenant.
Navigate to Administrator -> Tenants.
Select the Tenant from the NAME column.
Select the KMS tab.
Click Add. The Add a Kms Key pane displays.
Add a Kms Key pane Complete the following fields:
Key Name
Enter a friendly name for the key (e.g., test-key)
Key Id
Enter the cloud provider–specific key ID (AWS KMS Key ID or Azure Key Vault Key ID).
Key Arn
Enter the cloud provider–specific key ARN or resource ID. For AWS this is the KMS Key ARN; for Azure, this is the Key Vault Key ID URI.
Click Submit to add the key to the Tenant. Once added, the key can be selected when creating supported resources in the Tenant.
Selecting a KMS Key When Creating Resources
When creating a Host, RDS database, or other supported resource, select a KMS key to use for encrypting data at rest.
Navigate to the resource creation page (e.g., Hosts, RDS, or other supported resources).
Locate the Encryption Key or KMS Key field.
Choose a key from the options listed under Default Tenant Key, Plan-level Keys, or Tenant-level Keys.
Encryption Key selection options Complete the rest of the resource creation steps as usual.
Last updated
Was this helpful?