Chapter 2. Data Security in AWS
Data security in the AWS platform can be classified into two broad categories:
Protecting data at rest
Protecting data in transit
Furthermore, data security has the following components that help in securing data in multiple ways:
Data encryption
Key Management Services (KMS)
Access control
AWS service security features
AWS provides you with various tools and services to secure your data in AWS when your data is in transit or when your data is at rest. These tools and services include resource access control using AWS Identity and Access Management (IAM), data encryption, and managed KMS, such as AWS KMS for creating and controlling keys used for data encryption. The AWS KMS provides multiple options for managing your entire Key Management Infrastructure (KMI). Alternatively, you also have the option to go with the fully managed AWS CloudHSM service, a cloud-based hardware security module (HSM) that helps you generate and use your own keys for encryption purpose...
