Customer Managed Keys vs AWS-Managed Keys

This chapter compares the major differences between customer managed keys and AWS-managed keys, discussing how users can bring their own key materials and have control over the creation process with customer managed keys. It also explains the risks of accidentally locking oneself out of a KMS key by granting access through key policies or identity policies.