The MySQL Keyring The  keyring_aws  keyring plugin communicates with the Amazon Web Services Key Management Service (AWS KMS) as a back end for key generation and uses a local file for key storage. All keyring material is generated exclusively by the AWS server, not by  keyring_aws . keyring_aws  is available on these platforms: The discussion here assumes that you are familiar with AWS in general and KMS in particular. Some pertinent information sources: The following sections provide configuration and usage information for the  keyring_aws  keyring plugin: To install  keyring_aws , use the general instructions found in Section 6.4.4.3, “Keyring Plugin Installation” , together with the plugin-specific configuration information found here. The plugin library file contains the  keyring_aws  plugin and two loadable functions, keyring_aws_rotate_cmk()  and  keyring_aws_rotate_keys() . To configure  keyring_aws , you must obtain a secret access key that provides credentials for communicating with AWS KMS and write it to a configuration file: shell>  cd /usr/local/mysql shell>  mkdir mysql-keyring 1416 4. If necessary, create the directory in which the configuration file should be located. The directory should have a restrictive mode and be accessible only to the account used to run the MySQL server. For example, on Unix and Unix-like systems, to use  /usr/local/mysql/mysql-keyring/ keyring_aws_conf  as the file name, the following commands (executed as  root ) create its parent directory and set the directory mode and ownership: 3. Use the AWS KMS account to create a customer master key (CMK) ID. At MySQL startup, set the keyring_aws_cmk_id  system variable to the CMK ID value. This variable is mandatory and there is no default. (Its value can be changed at runtime if desired using  SET GLOBAL .) 2. Use AWS KMS to create a secret access key ID and secret access key. The access key serves to verify your identity and that of your applications. 1. Create an AWS KMS account. •keyring_aws Credential Changes •keyring_aws Operation •keyring_aws Configuration •KMS documentation •AWS site •Windows •Ubuntu 14.04 and 16.04 •SLES 12 •macOS 10.13 and 10.14 •EL7 keyring_aws Configuration