AWS KMS exposes ML-KEM to encapsulate keys against quantum computers

On October 26, 2026, AWS Key Management Service opened ML-KEM keys, the post-quantum key-encapsulation mechanism standardized by NIST under FIPS 203, with all three specifications ML-KEM-512, ML-KEM-768, and ML-KEM-1024 plus Encapsulate/Decapsulate APIs. For anyone who builds their own key transport, it is the shift from “AWS handles quantum for you” to “you can build post-quantum into your protocol.”