Hello and welcome to this course which has been designed to help you protect your data using the AWS Key Management Service (KMS), allowing you to perform cryptographic operations ensuring you implement data security best practices.

My name is Stuart Scott, and I am the AWS content Director here at Cloud Academy.  Feel free to connect with me to ask any questions using the details shown on the screen, alternatively you can always get in touch with us here at Cloud Academy by sending an e-mail to support@cloudacademy.com where one of our Cloud experts will reply to your question.

If you are a Solutions Architect, security engineer, or have responsibility to protect data then you should have an understanding of the different ways you can encrypt your data using KMS. This course would also be beneficial for anyone looking to take the AWS certified security - speciality certification  

As you progress through this guided course, you will be presented with a series of on-demand lessons and hands-on labs allowing you to become proficient in being able to implement and control encryption using KMS to secure your data. As a result, you will gain a greater understanding of the following:

• The basics of encryption.
• What the AWS KMS service allows you to do.
• The different core components and features of KMS, including:
• AWS KMS Keys
• Customer keys, AWS Managed Keys, and AWS Owned keys
• HMAC Keys
• Data Keys
• Data Key Pairs
• Key Material
• Key Rotation
• Key Policies
• Grants
• How you can use Key Policies, IAM policies, and Grants to control access to KMS keys.
• How to create a new KMS Key and edit key policies.
• How a user can delegate temporary permissions to another principal using grants.
• How to enable a KMS key
• Encrypt data using a Python AWS Lambda function
• Create a grant for a KMS key using the AWS CLI
• Understand the benefits of SSE-KMS and when to use it
• Create customer-managed keys in the AWS Key Management Service (KMS)
• Use SSE-KMS encryption at rest in S3 buckets
• Enforce that all objects in an S3 bucket are encrypted using SSE-KMS and if desired, requiring a specific CMK for the encryption
• Import your key material into AWS KMS
• Create and attach an EBS volume encrypted with your AWS KMS key

As a prerequisite to this course you may find it beneficial in having some familiarity with the fundamentals of AWS and some of its core services.

Feedback on our content here at Cloud Academy is valuable to both us as trainers and any students looking to take the same course in the future. If you have any feedback, positive or negative, it would be greatly appreciated if you could contact support@cloudacademy.com.

Please note that, at the time of writing this content, all information was accurate.  AWS implements hundreds of updates every month as part of its ongoing drive to innovate and enhance its services.

As a result, minor discrepancies may appear in the course content over time.  Here at Cloud Academy, we strive to keep our content up to date in order to provide the best training available. So, if you notice any information that is outdated, please contact support@cloudacademy.com.  This will allow us to update the course during its next release cycle.

Thank you!