> For the complete documentation index, see [llms.txt](https://help.dataimporter.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.dataimporter.io/security/bring-your-own-key.md).

# Bring your own Key

Follow these instructions to enable Customer Managed AWS Encryption. You will need to reach out to Dataimporter to complete the final step of the configuration.

## 1. Create AWS Key

1. In your AWS Account, create a new Key in Key Management Service (KMS).
2. In the Key Type choose <mark style="color:blue;">`Symmetric`</mark> and in the Advanced options choose <mark style="color:blue;">`Multi-Region key`</mark>

   <figure><img src="https://2845823711-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtvRVifvxmkDBmPKpGlr2%2Fuploads%2FPphH1hszDa0FgzftiyBt%2Fimage.png?alt=media&amp;token=50a72f15-5702-4990-b5e7-8289090594b4" alt=""><figcaption></figcaption></figure>
3. Enter an Alias. Choose the Roles and Users to Administer the Key. Under Other AWS Accounts, click on <mark style="color:blue;">`Add another AWS Account`</mark> and Enter Dataimporter's AWS Account Number: <mark style="color:blue;">`293026123612`</mark>

<figure><img src="https://2845823711-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FtvRVifvxmkDBmPKpGlr2%2Fuploads%2FIyHraKX5X9bLGhj6mQiK%2Fimage.png?alt=media&amp;token=d7d814f3-faad-41eb-b92b-09dd4f14594d" alt=""><figcaption></figcaption></figure>

4. On the newly created Key, take a note of the <mark style="color:blue;">`ARN`</mark>. You will need it later to configure in Dataimporter.

## 2. Provide your ARN to Dataimporter

1. Reach out to Dataimporter and provide the ARN of the newly created Key ARN. It will be in the following format: <mark style="color:blue;">`arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`</mark>
2. Dataimporter will configure your account to use this encryption Key. Once this is done we will confirm with you that your Custom Key setup is complete.