---
title: "Managing AWS KMS Connections"
description: "To encrypt data using an AWS KMS master key, you must first connect to an AWS account that manages this key. To learn how to do that, follow the instructions provided in section Adding Connections."
canonical: "https://helpcenter.veeam.com/docs/backup_salesforce/userguide/managing_kms_connections.html"
breadcrumb: "User Guide > Configuring Veeam Backup for Salesforce > Configuring Encryption Settings > Managing AWS KMS Connections"
dateModified: "2026-10-16"
---

# Managing AWS KMS Connections

To encrypt data using an AWS KMS master key, you must first connect to an AWS account that manages this key. To learn how to do that, follow the instructions provided in section [Adding Connections](adding_kms_connections.md).

Before you connect to an AWS account, check the following prerequisites:

- Make sure that the IAM user that will be used to perform data encryption has all the [required permissions](permissions.md).
- Make sure that you have created the AWS KMS master key in the AWS account. For more information, see [AWS Documentation](https://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html).
- Make sure that you have created an access key ID and a secret access key that will be used to authenticate requests to the AWS account. Keep in mind that you can see and copy this ID and key only when creating an access key pair. For more information, see [AWS Documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html).

## Related Topics

[Removing Connections](removing_kms_connections.md)