AWS KMS Compatibility

AWS KMS API compatibility is provided by the commercial AWS KMS shim, which translates AWS SDK requests to KeyRack gRPC calls. The operation support matrix and conformance methodology live on the commercial page:

• Commercial licensing → AWS KMS shim

For a FOSS-first starting point that keeps crypto on AWS while adding KeyRack visibility, see the keyrack-aws-proxy path in the Brownfield migration guide.