Is the Number of CMKs Created on KMS Limited?
Yes. The creation of CMKs is limited to 200 per account per region, excluding those in the scheduled deletion state. Cloud product keys are not included. To create more CMKs, please submit a ticket or contact Tencent Cloud sales. Which Cloud Services Can Use KMS to Encrypt Data?
KMS seamlessly integrates with Tencent Cloud services such as TencentDB, COS, and CBS. It uses envelope encryption to encrypt cloud product data.
How to Encrypt Data Using KMS
You can call Tencent Cloud KMS service in the following three ways:
Call KMS service via the KMS API. In this scenario, your business applications can be deployed either within or outside Tencent Cloud.
Integrate Tencent Cloud KMS SDK into your business applications to call KMS service. In this scenario, your business applications can be deployed either within or outside Tencent Cloud.
Call KMS service via a Tencent Cloud product that has been integrated with KMS to encrypt and decrypt the data of that product.
How to Enable Key Rotation
You can configure Tencent Cloud KMS to automatically rotate CMKs annually in the console.
After CMK rotation, you do not need to re-encrypt your data. Tencent Cloud automatically retains the original CMK. Ciphertexts previously encrypted with the original CMK can still be decrypted, while new data encryption uses the new CMK.