AWS Cloud TutorialLesson 63Free preview

AWS Data Protection

This lesson is part of AWS · All levels

Summary

Data protection in AWS is performed by encryption at rest and in transit, as well as good key management. AWS KMS provides and manages the encryption keys, while TLS secures data on the go. Amazon Macie helps find sensitive data on S3 so it doesn't get exposed by accident.

Key points

Encryption at rest using KMS on S3, EBS, and RDS
Encryption in transit using TLS/SSL
Customer managed key gives full control over the key
S3 Public Access Block prevents leaks from public configuration
Amazon Macie detects personal information (PII) on the S3

Full lesson

Code examples and quizzes

Full lessons, code examples, and quizzes are available to subscribers. 5 questions.