Skip to content
learning path

Create, Manage, and Control Cryptographic Keys using AWS KMS

Advanced
Up to 5h 41m
27
5/5
Enroll
Enhance your skill setDevelop essential skills for thriving in real-world scenarios.
Stay focused, stay committedBoost your learning journey by enrolling: stay focused, consistent and achieve your goals with ease.
Earn a certificate of completionShow your skills and build your credibility when you include them in your resume and LinkedIn profile.

Training content

3
4
COURSE
Beginner
3m 12s
Course Introduction - Create, manage, and control cryptographic keys using AWS KMS
This lesson introduces the Create, Manage, and Control Cryptographic Keys using AWS KMS course.
COURSE
Beginner
29m 55s
The Fundamentals of the AWS Key Management Service (KMS)
This lesson shows how KMS uses cryptography to protect data stored in AWS.
COURSE
Intermediate
22m 36s
Securing Access to Your AWS KMS Keys
Learn how to enforce data security measures within AWS KMS to ensure that both company and customer data from being accessed by unauthorized parties.
HANDS-ON LAB
Beginner
Up to 1h
Configuring Access to AWS KMS Keys
Learn how to allow and restrict access to AWS KMS keys using key policies and grants in this hands-on lab.
HANDS-ON LAB
Beginner
Up to 45m
Encrypting S3 Objects Using SSE-KMS
This lab explores how to encrypting S3 objects in AWS using SSE-KMS.
HANDS-ON LAB
Beginner
Up to 1h
Creating, Importing, and Using Your Own Customer Master Key
Learn how to use AWS Key Management Service to create a new CMK using your own key material in this hands-on lab.
HANDS-ON LAB
Intermediate
Up to 2h
Using Amazon Key Management Service to Encrypt S3 and EBS Data
In this lab, you'll learn about Amazon Key Management Service to encrypt S3 and EBS Data at an intermediate level. Get started today!

This course has been created to give you an understanding of the AWS Key Management Service, allowing you to protect your sensitive data through encryption methods.

Learning Objectives:

  • Understand the basics of encryption
  • Learn what the AWS KMS service has been designed to help you with
  • Understand the different core components and features of KMS, including:
    • AWS KMS Keys
    • Customer keys, AWS Managed Keys, and AWS Owned keys
    • HMAC Keys
    • Data Keys
    • Data Key Pairs
    • Key Material
    • Key Rotation
    • Key Policies
    • Grants
  • Understand how you can use Key Policies, IAM policies, and Grants to control access to KMS keys
  • Learn how to create a new KMS Key and edit key policies.
  • Learn how a user can delegate temporary permissions to another principal using grants
  • How to enable a KMS key
  • How to encrypt data using a Python AWS Lambda function
  • How to create a grant for a KMS key using the AWS CLI
  • Understand the benefits of SSE-KMS and when to use it
  • Create customer-managed customer master keys (CMKs) in AWS Key Management Service (KMS)
  • Use SSE-KMS encryption of objects at rest in S3 buckets
  • Enforce that all objects in an S3 bucket are encrypted using SSE-KMS and if desired, requiring a specific Key for the encryption
  • Learn how to generate random data suitable for use with AWS KMS
  • Learn how to import your key material into AWS KMS
  • Create and attach an EBS volume encrypted with your AWS KMS key


Prerequisites:

As a perquisite to taking this learning path, you may find it beneficial in having some familiarity with the fundamentals of AWS and some of its core services.

Feedback:

If you have any feedback on this learning path, positive or negative, please send an e-mail to support@cloudacademy.com

Your certificate for this learning path

About the Author

Avatar
Stuart Scott, opens in a new tab
AWS Content Director
Students
233,857
Labs
1
Courses
237
Learning paths
207

Stuart has been working within the IT industry for two decades covering a huge range of topic areas and technologies, from data center and network infrastructure design, to cloud architecture and implementation.

To date, Stuart has created 250+ courses relating to cloud computing reaching over 1 million+ students.

Stuart is a member of the AWS Community Builders Program for his contributions towards AWS.

He is AWS certified and accredited in addition to being a published author covering topics across the AWS landscape.

Stuart enjoys writing about cloud technologies and you will find many of his articles within our blog pages.

Covered Topics

Amazon Web Services
Management for AWS
Compute for AWS
Security for AWS
Amazon EC2
AWS Key Management Service (KMS)
Encryption
Identity and Access Management
Management
Security
Compute
High Availability