How do I share my AWS KMS keys across multiple AWS accounts?
"I want to securely grant access to my AWS KMS key to another AWS account, so that it can be used to encrypt and decrypt data on that account. What is the best way to share my KMS key?"
"I want to securely grant access to my AWS KMS key to another AWS account, so that it can be used to encrypt and decrypt data on that account. What is the best way to share my KMS key?ResolutionTo grant another account access to a KMS key, create an IAM policy on the secondary account that grants access to use the KMS key. For instructions, see Allowing users in other accounts to use a KMS key.You can also use automated monitoring tools to monitor your KMS keys.Note: It’s a best practice to grant least privilege access to your resources, especially when sharing them with accounts you don’t own.Related informationAllow a user to encrypt and decrypt with specific KMS keysShare custom encryption keys more securely between accounts by using AWS Key Management ServiceFollow"