Get the KMS key ARN for an Amazon S3 bucket

If the Amazon S3 bucket that contains the Amazon S3 location for your dataset has SSE-KMS encryption, follow these steps to obtain its AWS KMS key ARN.

If the Amazon S3 bucket that contains the Amazon S3 location for your dataset has SSE-KMS encryption, follow these steps to obtain its AWS KMS key ARN.
  1. In a new browser tab, log in to your AWS account and navigate to the Amazon S3 console.
  2. In the left-hand navigation pane of the Amazon S3 console, select General purpose buckets.
  3. Select the name of the Amazon S3 bucket that contains the Amazon S3 location for this dataset.
  4. Select the bucket Properties tab.
  5. Inspect the Default encryption section. If the Encryption type is Server-side encryption with AWS Key Management Service keys (SSE-KMS), copy the Encryption key ARN that appears below it.
  6. Back in the browser tab that contains your federated search dataset definition, paste the copied ARN into the AWS KMS key ARNs setting and select its drop-down value to set it in. The resource access policy updates automatically with the new ARN.
Complete the Update policies step of your dataset setup. Return to Apply the dataset resource access policy to an AWS IAM role.