> For the complete documentation index, see [llms.txt](https://help.dataimporter.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.dataimporter.io/security/bring-your-own-key.md).

# Bring your own Key

Follow these instructions to enable Customer Managed AWS Encryption. You will need to reach out to Dataimporter to complete the final step of the configuration.

## 1. Create AWS Key

1. In your AWS Account, create a new Key in Key Management Service (KMS).
2. In the Key Type choose <mark style="color:blue;">`Symmetric`</mark> and in the Advanced options choose <mark style="color:blue;">`Multi-Region key`</mark>

   <figure><img src="/files/if6eY5l9ajf7iDqIcV8b" alt=""><figcaption></figcaption></figure>
3. Enter an Alias. Choose the Roles and Users to Administer the Key. Under Other AWS Accounts, click on <mark style="color:blue;">`Add another AWS Account`</mark> and Enter Dataimporter's AWS Account Number: <mark style="color:blue;">`293026123612`</mark>

<figure><img src="/files/X1QKjTkeDEtsybCiUyIH" alt=""><figcaption></figcaption></figure>

4. On the newly created Key, take a note of the <mark style="color:blue;">`ARN`</mark>. You will need it later to configure in Dataimporter.

## 2. Provide your ARN to Dataimporter

1. Reach out to Dataimporter and provide the ARN of the newly created Key ARN. It will be in the following format: <mark style="color:blue;">`arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`</mark>
2. Dataimporter will configure your account to use this encryption Key. Once this is done we will confirm with you that your Custom Key setup is complete.