AWS · SAP-C03
Encryption and key management
SAP-C03 · Lesson 13 of 28 · 1:50:19
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SAP-C03 exam (AWS Certified Solutions Architect – Professional). In this lesson: encryption at rest with customer managed KMS keys, rotation, and multi-Region keys, encryption in transit with ACM, Private CA, and TLS policies, dedicated HSMs with CloudHSM, and post-quantum cryptography. Includes three original practice questions.
Preview the topics
- The bank must share encrypted EBS snapshots with its disaster recovery account, and auditors require the key to rotate every year, under a policy that the bank controls. Which key should the architect use?
- Hundreds of internal microservices must authenticate each other with certificates from a private hierarchy that the bank controls, without running its own CA servers. What should the architect use?
- Partner banks send contract data to the bank’s API, the data must stay confidential for twenty years, and the team worries about traffic captured now and decrypted later. What should the architect do first?