diff --git a/.github/workflows/test-kms-aws.yml b/.github/workflows/test-kms-aws.yml
new file mode 100644
index 00000000..ec0e9a81
--- /dev/null
+++ b/.github/workflows/test-kms-aws.yml
@@ -0,0 +1,24 @@
+name: Test AWS KMS with localstack
+on: [ push, pull_request ]
+
+jobs:
+  test-aws-kms:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout securesystemslib
+        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633
+
+      - name: Set up Python
+        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d
+        with:
+          python-version: '3.x'
+          cache: 'pip'
+          cache-dependency-path: 'requirements*.txt'
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          pip install --upgrade tox
+
+      - name: Run Tests against LocalStack
+        run: tox -e local-aws-kms