AWS · SAA-C03
Encryption and key management
SAA-C03 · Lesson 5 of 23 · 33:14
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAA-C03 exam (AWS Certified Solutions Architect – Associate). In this lesson: AWS owned, AWS managed, and customer managed KMS keys, key policies, envelope encryption, CloudHSM, encryption at rest for S3, EBS, and RDS, encryption in transit with TLS and AWS Certificate Manager, and key rotation and certificate renewal. Includes three original practice questions.
Preview the topics
- AnyCompany Logistics must encrypt its S3 data with a key that only two applications may use, and audit every use in CloudTrail. Which key should the architect choose?
- An existing Amazon RDS database was created without encryption, and a new policy requires encryption at rest. What should the architect do?
- A third-party TLS certificate, imported into ACM for a load balancer, expired without any renewal. What should the architect change to avoid this in the future?