Skip to main content

Granting access to a specific wallet on AWS

In this tutorial, you will learn how to connect an AWS Key Management System (KMS) to Starton.


Starton provides test wallets hosted on our Key Management System, but when going in production, to maintain control over your wallets, you should use your own KMS.

To connect Starton to your AWS KMS, you can grant access to Starton only to one wallet of your KMS. You can also grant full access to Starton on your KMS.


By granting access to Starton only to one wallet, you’ll have to create new wallets and import them every time on your own.

Creating a wallet on AWS

  1. On your AWS dashboard, search Key Management Service.

    You access a listing of your existing keys.


    A key is an equivalent to a wallet in this use case.

  2. Click Create a key.

  3. Set up your key:

    1. In Key type, select Asymmetric. 1. In Key usage, select Sign and verify. 1. In Key spec, select ECC_SECG-P256K1. 1. In Advanced options, select Multi-region key.
  4. Click Next.

  5. In Alias, enter a name for your key.

  6. Skip step 3 Define key administrative permissions.

  7. In step 4 Define key usage permissions, in Other AWS account, enter Starton information:

    1. In arn:aws:iam::, enter 052805596453.

Connecting your wallet on Starton

  1. From the Dashboard, go to Wallets.
  2. Click + Wallet.
  3. Select Connect a single Wallet from a Key Management System.
  4. Enter a Wallet name.
  5. Enter a Description.
  6. Enter the Key ARN. You will find it on AWS in the General Configuration panel following a arn:aws:kms:eu-west-3:XXXXXXXXXXXX:key/mrk-XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXformat.

Loubna Benzaama

Lead technical writer


February 26, 2024

Reading time:

2 min

  • Creating a wallet on AWS
  • Connecting your wallet on Starton