Create a new KMS key using one of the following options:The IAM section of the AWS Management Console. The CreateKey operation in the AWS KMS API. For more information, see http://docs.aws.amazon.com/kms/latest/developerguide/create-keys.html.