Associate a MACsec CKN/CAK with an Direct Connect endpoint LAG - AWS Direct Connect
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Associate a MACsec CKN/CAK with an Direct Connect endpoint LAG

After you create the LAG that supports MACsec, you can associate a CKN/CAK with the connection using either the Direct Connect console or using the command line or API.

Note

You cannot modify a MACsec secret key after you associate it with a LAG. If you need to modify the key, disassociate the key from the connection, and then associate a new key with the connection. For information about removing an association, see Remove the association between a MACsec secret key and an Direct Connect endpoint LAG.

To associate a MACsec key with a LAG

  1. Open the Direct Connect console at https://eusc-de-east-1.console.amazonaws-eusc.eu/directconnect/v2/home.

  2. In the navigation pane, choose LAGs.

  3. Select the LAG and choose View details.

  4. Choose Associate key.

  5. Enter the MACsec key.

    [Use the CAK/CKN pair] Choose Key Pair, and then do the following:

    • For Connectivity Association Key (CAK), enter the CAK.

    • For Connectivity Association Key Name (CKN), enter the CKN.

    [Use the secret] Choose Existing Secret Manager secret, and then for Secret, select the MACsec secret key.

  6. Choose Associate key.

To associate a MACsec key with a LAG using the command line or API