AWS Step Functions now provides enhanced data security with customer-managed AWS KMS keys, allowing organizations to maintain complete control over the encryption keys used to protect sensitive data processed in state machines, ensuring only allowed principals have access to sensitive information.

<div>
<p>The article explains how to strengthen data security in AWS Step Functions by using a customer-managed AWS KMS key.</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Benefits of using a customer-managed KMS key with Step Functions</li>
<li>How to configure a customer-managed KMS key for Step Functions</li>
<li>Security controls and best practices for cross-account access to the KMS key</li>
<li>Testing the sample application with a customer-managed KMS key</li>
<li>Conclusion and additional resources for using customer-managed KMS keys with Step Functions</li>
</ul>
</div>


Strengthening data security in AWS Step Functions with a customer-managed AWS KMS key

Related articles

Related articles

Jul 25
2024
AWS Step Functions now supports Customer Managed Keys

Apr 13
2026
Options for changing AWS KMS encryption key for Amazon RDS databases

Nov 21
2025
Practical steps to minimize key exposure using AWS Security Services

Nov 6
2025
AWS Backup now supports AWS KMS customer managed keys with logically air-gapped vaults