This section contains recommendations for configuring AWS KMS resources and options.


AWS > PCI v3.2.1

AWS > PCI v3.2.1 > KMS

Azure > Management Group

Azure > Subscription

Azure > Tenant

Turbot > Folder

Turbot

Turbot > IAM > Turbot Identity

Turbot > IAM > Unidentified Identity

Azure > Active Directory > Directory

Kubernetes > Cluster

GCP > Project

GitHub > Repository

AWS > Account

ServiceNow > Instance

Azure > SignalR Service > SignalR

Azure > Resource Group

Azure > Managed Identity > User Assigned Identity

Azure > Databricks > Workspace

Azure > Load Balancer > Load Balancer

Azure > Log Analytics > Log Analytics Workspace

Azure > SQL > Database

Azure > SQL > Elastic Pool

Azure > SQL > Managed Instance

Azure > SQL > Server

Azure > SQL Virtual Machine Service > SQL Virtual Machine

Azure > Application Insights > Application Insight

Azure > AKS > Managed Cluster

Azure > Compute > Availability Set

Azure > Compute > Disk

Azure > Compute > Disk Encryption Set

Azure > Compute > Image

Azure > Compute > Snapshot

Azure > Compute > Ssh Public Key

Azure > Compute > Virtual Machine

Azure > Compute > Virtual Machine Scale Set

Azure > Storage > Storage Account

Azure > Firewall > Firewall

Azure > Monitor > Action Group

Azure > Monitor > Metric Alert

Azure > App Service > App Service Plan

Azure > App Service > Web App

Azure > Network Watcher > Network Watcher

Azure > Key Vault > Vault

Azure > Network > Application Security Group

Azure > Network > Bastion Host

Azure > Network > Express Route Circuits

Azure > Network > Network Interface

Azure > Network > Network Security Group

Azure > Network > Private DNS Zones

Azure > Network > Private Endpoints

Azure > Network > Public IP Address

Azure > Network > Route Table

Azure > Network > Virtual Network

Azure > Network > Virtual Network Gateway

Azure > Network > Private Link Service

Azure > Container Registry > Registry

Azure > Service Bus > Namespace

Azure > Search Management > Search Service

Azure > Relay > Namespace

Azure > Automation > Automation Account

Azure > Automation > Runbook

Azure > Recovery Service > Vault

Azure > PostgreSQL > Flexible Server

Azure > PostgreSQL > Server

Azure > Synapse Analytics > SQL Pool

Azure > Synapse Analytics > Workspace

Azure > Data Factory > Factory

Azure > DNS > Zone

Azure > DNS > Record Set

Azure > Cosmos DB > Database Account

Azure > MySQL > Flexible Server

Azure > MySQL > Server [Deprecated]

Azure > Application Gateway Service > Application Gateway

Azure > API Management > API Management Service

GCP > Composer > Environment

GCP > Network > Forwarding Rule

GCP > Network > Global Forwarding Rule

GCP > Network > VPN Tunnel

GCP > Pub/Sub > Snapshot

GCP > Pub/Sub > Subscription

GCP > Pub/Sub > Topic

GCP > Dataplex > Lake

GCP > Dataplex > Task

GCP > Dataplex > Zone

GCP > Dataproc > Cluster

GCP > Dataproc > Job

GCP > Dataproc > Workflow Template

GCP > KMS > Crypto Key

GCP > Bigtable > Instance

GCP > Kubernetes Engine > Region Cluster

GCP > Kubernetes Engine > Zone Cluster

GCP > App Engine > Service

GCP > Storage > Bucket

GCP > Vertex AI > Endpoint

GCP > Secret Manager > Secret

GCP > Spanner > Instance

GCP > DNS > Managed Zone

GCP > BigQuery > Dataset

GCP > BigQuery > Table

GCP > SQL > Instance

GCP > Compute Engine > Disk

GCP > Compute Engine > Image

GCP > Compute Engine > Instance

GCP > Compute Engine > Region Disk

GCP > Compute Engine > Snapshot

GCP > Memorystore > Instance

AWS > GuardDuty > Detector

AWS > GuardDuty > IPSet

AWS > GuardDuty > ThreatIntelSet

AWS > Elasticsearch > Domain

AWS > Resource Access Manager > Resource Share

AWS > VPC > VPC

GCP > Folder

AWS > EC2 > Instance

AWS > Region

Control: AWS > PCI v3.2.1 > KMS

Category

In Your Workspace

Developers