The Key Management Service (KMS) now supports the new "Sign & Verify" function in addition to the existing "Decrypt & Encrypt" function.
An overview of the two functions can be found in the table below:
KMS supports Sign & Verify
Function | Description | Key type | Key spec |
Encrypt & Decrypt | Encrypts and decrypts data or data key. | Symmetric key AES | AES_256 |
Asymmetric key RSA | RSA_2048 | ||
Sign & Verify | Creates and verifies digital signatures | Asymmetric key RSA & ECC | RSA_2048 |
Overview of the new "Sign and Verify" functionality:
As part of the update, the console was also updated to show the functions and keys used:
For more information, see the Key Management Service (KMS) section of the Help Center.