AWS Certified Cloud Practitioner

Encryption on AWS

Learn the difference between encryption at rest and in transit, and how AWS KMS, AWS CloudHSM, and AWS Certificate Manager help you protect your data with managed keys and certificates.

Beginner 16 minutes 4 Learning Objectives
  1. Distinguish encryption at rest from encryption in transit
  2. Explain what AWS KMS does and how it manages encryption keys
  3. Compare AWS KMS with AWS CloudHSM and know when each fits
  4. Identify AWS Certificate Manager as the service for SSL/TLS certificates