Situation 

When configuring Customer Managed Key (CMK) in association with Neo4j Aura, you can set up your own keys created on your supported Cloud Service Providers on Aura. Aura will validate the keys, and customers can start encrypting new Aura instances using valid keys.

If you use AWS as your Cloud Service Provider, you have the option to create either a ‘Single-region’ key or a ‘Multi-region’ key.
 

Single-Region Key

Single-region keys reside in only one AWS region, which must be in the same region as your Neo4j Aura instance(s).

Multi-Region Key

Multi-region keys have a master region, however these can be replicated to other regions where your Neo4j Aura instance(s) reside. The replica(s) share the same key ID and different ARNs with the master key.

To find out more about Single-region and Multi-region keys and using these with Neo4j Aura, please refer to the AWS Key Management Service documentation, along with the Customer Managed Keys section of the Neo4j Aura product documentation .