Chapter 19: Protecting Data in Flight and at Rest
As you and your developers start to connect to your systems, security is not always front of mind. This is especially the case if you think that encryption keys and certificate handshakes could cause latency. Incorporating encryption both for data in transit and at rest is a must, especially in today's environments.
There are multiple ways to incorporate encryption into your environment. It can start with how to secure the transmissions you are sending back and forth between you and AWS. It then progresses to securing data that you are storing on the Amazon cloud and then moves on to data that you are serving for your customers to access.
In this chapter, we're going to cover the following main topics:
- Understanding KMS keys
- Adding encryption to storage
- Adding encryption to data stores
- Protecting data in transit with AWS Certificate Manager
- Adding a certificate to Amazon CloudFront...