Amazon data encryption
Data encryption is a must for securing sensitive data in the cloud. As we have discussed, almost all the AWS cloud data services provide data encryption. In this section, we will spend time introducing AWS KMS and explain how it is leveraged in S3 object encryption using an example.
KMS is a fully managed service to manage encryption keys. It is designed to simplify the process of creating and managing encryption keys, whether they are stored in Amazon S3, EBS, RDS, or other services. AWS KMS provides the following:
- Centralized key management: With AWS KMS, you can centrally manage encryption keys used to protect your data across multiple AWS services and applications.
- Customizable key policies: You can set fine-grained access controls on your encryption keys to define who can use them and under what conditions.
- Encryption key creation: AWS KMS enables you to create new encryption keys, import your own keys, and manage the lifecycle of your...
