Hacker News Reader

mcintyre1994

I didn't realise that KMS underlay AWS' internal infrastructure, literally the same KMS service that's exposed to users? Do you know if AWS' internal infrastructure is actually documented publicly in terms of how services fit together internally anywhere? Or is that all considered secret beyond what's exposed to users?

View on HN

Yeah, this stuff isn't secret. Note how if you encrypt your S3 bucket it uses a KMS CMK; that's an dependency between S3 and KMS, and yep it's the same KMS. This is true for probably over a hundred AWS services that rely on KMS; it's a "foundational" service. (As is S3.)

Reply on news.ycombinator.com