
AWS Backup now enables encryption of logically air-gapped vaults using customer managed KMS keys, providing enhanced backup protection and compliance options across AWS Regions.


<div>
<p>
AWS Backup has expanded its encryption capabilities by now supporting AWS KMS customer managed keys (CMKs) with logically air-gapped vaults.
</p>
<ul>
<li>Enables encryption of backups using customer managed keys in logically air-gapped vaults</li>
<li>Provides additional encryption options beyond AWS-owned keys</li>
<li>Supports key management across accounts while maintaining vault security</li>
<li>Available in all AWS Regions that support logically air-gapped vaults</li>
<li>Can be configured through AWS Backup console, API, or CLI</li>
</ul>
<p>
This enhancement gives organizations more control over backup encryption and helps meet regulatory and compliance requirements while maintaining seamless backup workflows.
</p>
</div>


AWS Backup now supports AWS KMS customer managed keys with logically air-gapped vaults

Related articles

Related articles

Nov 6
2025
Encrypt AWS Backup logically air-gapped vaults with customer-managed keys

Nov 17
2025
AWS Backup now supports backing up directly to a logically air-gapped vault

Mar 12
2026
AWS Backup adds logically air-gapped vault support for Amazon EKS

Nov 10
2025
AWS Backup now supports Amazon EKS