Migrating to IAM Roles Anywhere Connections

To migrate from an access key and secrets-based connection to an IAM Roles Anywhere-based connection:

1. On the CipherTrust Data Security Platform Service, create an AWS connection with IAM Roles Anywhere enabled. Refer to the following sections for details:

   1. Prerequisites

   2. Additional Configuration for AWS IAM Roles Anywhere

   3. Connection Manager

2. Open the Cloud Key Manager application.

3. In the left pane, click KMS Containers > AWS KMS Accounts.

4. Update the desired AWS KMS account with the AWS IAM Roles based connection (created above).

5. Verify that all the KMS operations are working as expected.