Tagging keys

In Amazon KMS, you can add tags to a customer managed key when you create the KMS key, and tag or untag existing KMS keys unless they are pending deletion. You cannot tag aliases, custom key stores, Amazon managed keys, Amazon owned keys, or KMS keys in other Amazon Web Services accounts. Tags are optional, but they can be very useful.

For more information, see Creating keys and Editing keys. For general information about tags, including best practices, tagging strategies, and the format and syntax of tags, see Tagging Amazon resources in the Amazon Web Services General Reference.