AWS IAM Identity Center now supports customer-managed KMS keys for encryption at rest

AWS IAM Identity Center now supports customer-managed KMS keys for encrypting identity data at rest, providing organizations with more control over encryption key management.

• Customers can use their own AWS KMS keys to encrypt user and group attributes
• Supports both single-Region and multi-Region encryption keys
• Provides full control over key lifecycle, including creation, rotation, and deletion
• Enables granular access controls and detailed AWS CloudTrail logging
• Available in all AWS commercial, GovCloud, and China Regions

Key considerations include verifying key permissions, checking AWS managed application compatibility, and configuring appropriate IAM policies to prevent service disruption.