From the course: AWS Essential Training for Architects

Unlock this course with a free trial

Join today to access over 25,900 courses taught by industry experts.

Securing keys and credentials

Securing keys and credentials - Amazon Web Services (AWS) Tutorial

From the course: AWS Essential Training for Architects

Start my 1-month free trial Buy for my team

Securing keys and credentials

“

When working in AWS, a key aspect is securely storing sensitive information such as keys and credentials. AWS has two services that can help with this. AWS Key Management Service, also known as KMS and AWS Secrets Manager. AWS KMS allows you to create and store keys used for cryptographic operations such as encryption. Encryption allows you to securely store data at rest. With KMS, you can create and edit symmetric and asymmetric keys. You can use these to encrypt, decrypt, and re-encrypt data. You can control access to keys using key policies and IAM policies. You can automatically rotate the cryptographic material of a key. Cryptographic material refers to the string of bits used in a cryptographic algorithm. You can also use KMS to delete keys. When you create a key with KMS, you cannot extract, export, view, or manage the key material. The only exception to this is when you create an asymmetric key pair, in which case, you can export the public key outside of AWS. The private key…

Contents