Skip to content

Components of KMS

Intermediate
11m
19,114
4.7/5

Please note that this course has been outdated and replaced with two new courses on AWS KMS:

 

Unencrypted data can be read and seen by anyone who has access to it, and data stored at-rest or sent between two locations, in-transit, is known as ‘plaintext’ or ‘cleartext’ data.  The data is plain to see and can be seen and understood by any recipient. There is no problem with this as long as the data is not sensitive in any way and doesn’t need to be restricted.   

However, on the other hand, If you have data that IS sensitive and you need to ensure that the contents of that data is only viewable by a particular recipient, or recipients, then you need to add a level of encryption to that data.  

But what is data encryption?
 
This course answers that question by first explaining at a high level what symmetric and asymmetric encryption is, before diving into how the Key Management Service (KMS) can help you achieve the required level of encryption of your data across different services.
 
You will understand why KMS is key to your data security strategy within your organization and how you can use this service to manage data encryption through a series of different encryption keys, either KMS generated or by using your own existing on-premises keys.
 

Learning Objectives

By the end of this course series you will be able to:

  • Define how the Key encryption process works
  • Explain the differences between the different key types  
  • Create and modify Key policies
  • Understand how to rotate, delete and reinstate keys
  • Define how to import your own Key material

Intended Audience

As this course focuses on data encryption, it’s ideally suited to those in the following roles:

  • Cloud Administrators
  • Cloud Support & Operations
  • Cloud Security Architects
  • Cloud Security Engineers

Prerequisites

To gain the most from this course you should have a basic understanding and awareness of the following:

  • AWS CloudTrail
  • AWS IAM (Understanding of policies)

This course includes

6 lectures

4 demonstrations

Feedback

If you have thoughts or suggestions for this course, please contact Cloud Academy at support@cloudacademy.com.

About the Author
Avatar
Stuart Scott, opens in a new tab
AWS Content Director
Students
232,729
Labs
1
Courses
237
Learning paths
206

Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.

To date, Stuart has created 250+ courses relating to cloud computing reaching over 1 million+ students.

Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.

He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.

Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.

Covered Topics
Encryption
Identity and Access Management
Management
Security
Amazon Web Services
Security for AWS
Management for AWS
AWS Key Management Service (KMS)