We will start by creating our key from AWS KMS by setting the key material origin to External. Then, we will download the key import wrapper from the AWS KMS service, generate the key in our local machine, and wrap it with the import wrapper. Finally, we will upload our key material that's been wrapped with the import wrapper to finish key creation.