> For the complete documentation index, see [llms.txt](https://notes.tatusl.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.tatusl.dev/aws/kms.md).

# Key Management Service (KMS)

## Cross-account key access

Setting up cross-account KMS access feels tricky sometimes. However, AWS have documentation page describing the process and minimal set of IAM actions needed.

<https://docs.amazonaws.cn/en_us/kms/latest/developerguide/key-policy-modifying-external-accounts.html>