title: AWS KMS Multi region
body: <p>Using AWS KMS Encryption SDK - MultipleProviderFactory, multiple CMKs from different region can be combined to single master key provider, the first CMK is used to generate data key, other CMKs just to encrypt the data key. This helps to decrypt using local KMS endpoint. </p>
  
  <p><a href="https://aws.amazon.com/blogs/security/how-to-use-the-new-aws-encryption-sdk-to-simplify-data-encryption-and-improve-application-availability/" rel="noreferrer">https://aws.amazon.com/blogs/security/how-to-use-the-new-aws-encryption-sdk-to-simplify-data-encryption-and-improve-application-availability/</a></p>
  
  <p>Won't it fail if Region of first CMK is down and data key is not generated as the first CMK is the one to generate data key?? Any solution or workaround ??</p>