How to Use KMS Key Encryption to Protect Your Data

有权访问该文件的任何人都可以读取和查看未加密的数据，并且静态存储或在两个位置（在途）之间发送的数据被称为“明文”或“明文”数据。数据一目了然，任何接收者都可以看到和理解。只要数据在任何方面都不敏感并且不需要限制，这没有问题。

但是，另一方面，如果您拥有敏感数据，并且需要确保该数据的内容只能由特定收件人或多个收件人查看，则您需要为该数据添加加密级别。

但什么是数据加密？

本课程首先从高层次解释什么是对称和非对称加密，然后深入研究密钥管理服务 (KMS) 如何帮助您跨不同服务实现所需的数据加密级别，从而回答这个问题。

您将了解为什么 KMS 是您组织内数据安全策略的关键，以及您如何使用此服务通过一系列不同的加密密钥（KMS 生成的或使用您自己现有的本地密钥）来管理数据加密。

Video: .MP4, AVC, 1728×1080, 30 fps | Audio: English, AAC, 44.1 KHz, 2 Ch | Duration: 1h 11m | 1.25 GB
Instructor: Stuart Scott

Description

Unencrypted data can be read and seen by anyone who has access to it, and data stored at-rest or sent between two locations, in-transit, is known as ‘plaintext’ or ‘cleartext’ data. The data is plain to see and can be seen and understood by any recipient. There is no problem with this as long as the data is not sensitive in any way and doesn’t need to be restricted.

However, on the other hand, If you have data that IS sensitive and you need to ensure that the contents of that data is only viewable by a particular recipient, or recipients, then you need to add a level of encryption to that data.

But what is data encryption?

This course answers that question by first explaining at a high level what symmetric and asymmetric encryption is, before diving into how the Key Management Service (KMS) can help you achieve the required level of encryption of your data across different services.

You will understand why KMS is key to your data security strategy within your organization and how you can use this service to manage data encryption through a series of different encryption keys, either KMS generated or by using your own existing on-premise keys.

Learning Objectives

By the end of this course series you will be able to:

Define how the Key encryption process works
Explain the differences between the different key types
Create and modify Key policies
Understand how to rotate, delete and reinstate keys
Define how to import your own Key material

Intended Audience

As this course focuses on data encryption, it’s ideally suited to those in the following roles:

Cloud Administrators
Cloud Support & Operations
Cloud Security Architects
Cloud Security Engineers

Prerequisites

To gain the most from this course you should have a basic understanding and awareness of the following:

AWS CloudTrail
AWS IAM (Understanding of policies)