AWS key management service

StackZone will create a variety of AWS KMS kfor you to use in each AWS account within your AWS organization. There are separate keys to use with different services such as EBS volume encryption, CloudWatch logs encryption and backup encryption which encrypts AMI’s and snapshots. Each of these KMS keys are created in every activated AWS region with an appropriate policy already attached.