Amazon Transcribe adds customer-managed KMS keys for custom resources

Amazon Transcribe Updates

Amazon Transcribe now allows you to encrypt your custom vocabularies, custom vocabulary filters, and custom language models at rest using a customer-managed AWS KMS key. This key is owned and controlled by you.

Previously, these resources were encrypted with an AWS-owned key. Now, you can specify your own symmetric AWS KMS key when creating or updating these resources. If you don't provide a key, your resources will continue to be encrypted with an AWS-owned key—no action is required unless you choose to opt-in.

With a customer-managed key, you have full control over key permissions and can decide which principals and services can encrypt and decrypt your resources. Every use of your key is logged in AWS CloudTrail, providing a full audit trail for compliance and monitoring. You can also disable the key or transition resources to a different key to manage access as needed.

This feature is available in all AWS Regions where Amazon Transcribe is offered.

What to do

• Review your current encryption settings for custom resources in Amazon Transcribe.
• Decide if you want to use a customer-managed key for added control.
• Update your key management policies and permissions as needed.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.