Choosing a keyring

Your keyring determines the wrapping keys that protect your data keys, and ultimately, your data. Use the most secure wrapping keys that are practical for your task. Whenever possible use wrapping keys that are protected by a hardware security module or a key management infrastructure, such as KMS keys in AWS Key Management Service (AWS KMS) or encryption keys AWS CloudHSM.

The AWS Encryption SDK provides several keyrings and keyring configurations in multiple programming languages, and you can create your own custom keyrings. You can also create a multi-keyring that includes one or more keyrings of the same or a different type.