KMS key: http://docs.aws.amazon.com/kms/latest/developerguide/getting-started.html IAM user with Encrypt permissions IAM user with Decrypt permissions For more info ...