Amazon Cognito now supports customer managed key for encryption at rest

Amazon Cognito Customer Managed Keys Support

Amazon Cognito now supports customer managed keys in AWS Key Management Service (KMS) for encrypting user pool data at rest. This feature allows you to have full control over the encryption keys, aligning with your organization's data governance objectives.

What to do

• Create and manage customer managed keys in AWS KMS.
• Configure keys when creating a new user pool or updating an existing one.
• Use AWS CloudTrail to monitor and audit key usage.

Customer managed keys are available in Essentials and Plus tiers at no additional costs. Standard AWS KMS charges apply.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.