All Products
Search
Document Center

Key Management Service:Release notes

Last Updated:Sep 04, 2024

This topic describes the release notes of Key Management Service (KMS)Key Management Service (KMS).

June 2024

Description

Release date

Region

References

KMS secrets are integrated into Data Management (DMS) to support database logons.

2024-06-03

All regions

Integrate ApsaraDB RDS secrets into DMS

May 2024

Description

Release date

Region

References

Bring Your Own Key (BYOK) keys are supported for KMS instances of the software key management type.

2024-05-09

All regions

The free automatic back feature is supported for KMS instances of the software key management type.

2024-05-10

All regions

Backups

April 2024

Description

Release date

Region

References

Cross-region synchronization of keys in KMS instances is supported.

2024-04-11

All regions

Cross-region synchronization

KMS instances of the external key management type are supported. Hold Your Own Key (HYOK) keys are supported.

2024-04-29

All regions

Manage external keys

March 2024

Description

Release date

Region

References

Resource-based policies are supported. You can attach policies to resources such as keys or secrets to control which Alibaba Cloud accounts, Resource Access Management (RAM) users, and RAM roles can access or perform operations on the resources.

2024-03-20

All regions

December 2023

Description

Release date

Region

References

The SecretType parameter is provided when you call the ListSecrets operation.

2023-12-27

All regions

ListSecrets

The Thailand (Bangkok) region is supported.

Thailand (Bangkok)

Regions and endpoints

November 2023

Description

Release date

Region

References

KMS is integrated with Cloud Monitor (CMS) to provide the monitoring and alerting feature for system events.

2023-11-24

All regions

Alert events

October 2023

Description

Release date

Region

References

KMS is integrated with Simple Log Service (SLS). Logs of KMS instances for up to 180 days can be stored, queried, and analyzed.

2023-10-30

All regions

September 2023

Description

Release date

Region

References

The generation of asymmetric data key pairs is supported for KMS instances.

2023-09-25

All regions

August 2023

Description

Release date

Region

References

Dual-zone deployment is supported to improve service availability and disaster recovery capabilities.

2023-08-11

All regions

Purchase and enable a KMS instance

July 2023

Description

Release date

Region

References

Computing performance of 10,000 QPS and 20,000 QPS is supported for KMS instances of the software key management type.

2023-07-28

All regions

Performance quotas

The China (Chengdu) region is supported.

China (Chengdu)

Regions and endpoints

June 2023

Description

Release date

Region

References

Tag Service is supported.

Note

You can add tags to multiple keys or secrets at a time.

2023-06-20

China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Chengdu), China (Hong Kong), Japan (Tokyo), South Korea (Seoul), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Germany (Frankfurt), UK (London), US (Silicon Valley), US (Virginia), Philippines (Manila), and Thailand (Bangkok)

Symmetric keys in KMS instances of the software key management type can be rotated.

Configure key rotation

Keys and secrets in KMS instances of the software key management type can be backed up and restored.

Backups

April 2023

Description

Release date

Region

References

A KMS instance can be shared across multiple Alibaba Cloud accounts for server-side encryption in Alibaba Cloud services by using the resource sharing feature.

2023-04-20

China (Hangzhou), China (Shanghai), China (Shenzhen), China (Heyuan), China (Guangzhou), China (Beijing), China (Zhangjiakou), China (Hohhot), China (Ulanqab), China (Chengdu), China (Hong Kong), Japan (Tokyo), South Korea (Seoul), Singapore, Malaysia (Kuala Lumpur), Indonesia (Jakarta), Germany (Frankfurt), UK (London), US (Silicon Valley), US (Virginia), Philippines (Manila), and Thailand (Bangkok)

Share a KMS instance across multiple Alibaba Cloud accounts

March 2023

Description

Release date

Region

References

A new version of the KMS console is released. You can create and manage software-protected keys, hardware-protected keys, and default keys. You can also create and manage secrets.

2023-03-16

All regions

October 2021

Description

Release date

Region

References

KMS is available in the Philippines (Manila) region.

2021-10-01

Philippines (Manila)

None

September 2021

Description

Release date

Region

References

Dedicated KMS of the Standard edition is supported.

2021-09-05

China (Hangzhou), China (Shanghai), China (Beijing), China (Shenzhen), China (Hong Kong), Malaysia (Kuala Lumpur), and Singapore (Singapore)

August 2021

Description

Release date

Region

References

Dynamic Resource Access Management (RAM) secrets are supported.

2021-08-13

All regions

January 2021

Description

Release date

Region

References

  • Dynamic ApsaraDB RDS secrets are supported.

  • The RotateSecret and UpdateSecretRotationPolicy operations are supported.

2021-01-04

All regions

October 2020

Description

Release date

Region

References

  • An API operation is supported to activate KMS.

  • The OpenKmsService and DescribeAccountKmsStatus operations are supported.

2020-10-20

All regions

July 2020

Description

Release date

Region

References

  • Cross-system exchange, re-encryption, and cross-region import and export of data keys are supported.

  • The GenerateDataKeyWithoutPlaintext, GenerateAndExportDataKey, ExportDataKey, and ReEncrypt operations are supported.

  • KMS is available in the China (Guangzhou) region.

2020-07-07

All regions

February 2020

Description

Release date

Region

References

  • The Secrets Manager feature of KMS is released.

  • API operations are supported to implement the Secrets Manager feature.

  • KMS is available in the China (Ulanqab) and China (Heyuan) regions.

2020-02-24

All regions

December 2019

Description

Release date

Region

References

  • Asymmetric keys are supported.

  • The AsymmetricEncrypt, AsymmetricDecrypt, AsymmetricSign, AsymmetricVerify, and GetPublicKey operations are supported.

2019-12-13

All regions

November 2019

Description

Release date

Region

References

A hardware security module (HSM) cluster can be used to store keys in instances of the hardware key management type. HSMs meet the regulatory requirements of State Cryptography Administration (SCA).

2019-11-18

China (Beijing) and China (Shanghai)

Overview

September 2019

Description

Release date

Region

References

  • Automatic rotation of a ustomer master key (CMK) is supported. Each CMK can have multiple versions.

  • The UpdateKeyDescription and GenerateDataKeyWithoutPlaintext operations are supported.

2019-09-24

All regions

Automatic key rotation

July 2019

Description

Release date

Region

References

A HSM cluster can be used to store keys in instances of the hardware key management type.

2019-07-31

Singapore and China (Hong Kong)

Overview

May 2019

Description

Release date

Region

References

Key tags and tag-based authentication are supported.

2019-05-01

All regions

July 2018

Description

Release date

Region

References

ActionTrail is supported.

2018-07-24

All regions

Use ActionTrail to query KMS event logs

March 2018

Description

Release date

Region

References

  • API operations are added to support BYOK.

  • API operations are added to support CMK aliases.

  • KMS is available in the following regions: Indonesia (Jakarta), US (Virginia), and US (Silicon Valley).

2018-03-30

All regions

Import key material

November 2017

Description

Release date

Region

References

KMS is available in the following regions: China (Qingdao), China (Hohhot), and Malaysia (Kuala Lumpur).

2017-11-15

China (Qingdao), China (Hohhot), and Malaysia (Kuala Lumpur)

None

June 2017

Description

Release date

Region

References

  • The DescribeRegions operation is added.

  • The KMS SDK version is updated to V2.4.0.

2017-06-05

All regions

DescribeRegions

May 2017

Description

Release date

Region

References

  • KMS is available for commercial use at the China site (aliyun.com) on April 25, 2017.

  • KMS is available in the China (Zhangjiakou) region.

2017-05-10

All regions

None

March 2017

Description

Release date

Region

References

The performance is optimized.

2017-03-01

All regions

None

January 2017

Description

Release date

Region

References

KMS is available in the China (Hong Kong) region.

2017-01-22

China (Hong Kong)

None

November 2016

Description

Release date

Region

References

KMS is available in the following regions: Japan (Tokyo), Germany (Frankfurt), and UAE (Dubai).

2016-11-29

Japan (Tokyo), Germany (Frankfurt), and UAE (Dubai)

None

September 2016

Description

Release date

Region

References

The ScheduleKeyDeletion and CancelKeyDeletion operations are supported to schedule or cancel the deletion task of a CMK.

2016-09-20

All regions

August 2016

Description

Release date

Region

References

The EncryptionContext parameter can be configured when you call the Encrypt and Decrypt operations.

2016-08-10

All regions

EncryptionContext

June 2016

Description

Release date

Region

References

A CMK can be enabled or disabled.

2016-06-22

All regions

Create a key

May 2016

Description

Release date

Region

References

KMS is available in the following regions: China (Beijing), China (Shanghai), and China (Shenzhen).

2016-05-19

China (Beijing), China (Shanghai), and China (Shenzhen)

None

April 2016

Description

Release date

Region

References

KMS is released.

2016-04-06

All regions

What is Key Management Service?