INFO

Ensure KMS multi-region keys are properly configured

Multi-region KMS keys should be used when data encryption is required across regions.

Security Impact

Single-region keys cannot decrypt data in other regions without copying data.

How to Remediate

Create multi-region primary keys and replicate to required regions for cross-region encryption.

Affected Resources

AWS::KMS::KeyAWS::KMS::ReplicaKey

Compliance Frameworks

SOC 2

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Key Management Service (KMS) resources across your AWS accounts every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2 compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
aws-kms-13
Service
Key Management Service (KMS)
Category
Key Management
Severity
INFO

Automate This Check

TigerGate automatically scans your AWS environment for this and 575+ other security checks.

Start Free Trial