Hacker News new | ask | show | jobs
by DrRobinson 1276 days ago
> And yes, default service KMS keys are unique per account (why would you expect otherwise?).

I expect it to be unique per account, but I would be happy if it was possible to share it with other accounts so one could make cross account backups (it's good practice to have a separate AWS account for backups.) Currently this requires a KMS key, which means data encrypted with the default key must be re-encrypted and that takes a lot of time and effort.