Passing the AWS KMS alias to the application on startup

In AWS KMS, an alias is a display name for a customer master key. The alias must be created for each tenant as part of tenant creation before running the WFM application.

The alias is passed to the application using the JVM system property wb.tenant.aws.kms.alias. This system property must be provided as a startup parameter in both the job scheduler and all the application servers.

If the alias is not set while the application is running in Commerical Cloud or GovCloud mode, an error is displayed in the logs.