Use AES128 to generate a 128-bit symmetric key, or AES256 to generate a 256-bit symmetric key. You must specify either the KeySpec or the NumberOfBytes parameter (but not both) in every GenerateDataKey request. Generate aes 128 bit key with aws kms download.
