From the course: AWS Certified Machine Learning Engineer - Associate (MLA-C02) Cert Prep

Unlock this course with a free trial

Join today to access over 26,500 courses taught by industry experts.

AWS Key Management Service (KMS) overview

AWS Key Management Service (KMS) overview

“

Now let's talk about AWS Key Management Service, or KMS. AWS Key Management Service, or KMS, is a managed service that makes it easy for you to create, rotate, enable, and disable encryption keys. When you think of data encryption in AWS, think of KMS. But first, what is encryption? Encryption can be defined as the process of converting plain text data into a non-readable format or also known as ciphertext. Obviously, this is done to hide the original meaning of the message so that only the person or party to whom it is addressed can read and understand it. An encryption key is basically what you would use to encrypt and decrypt data. With AWS KMS, creating an encryption key is as straightforward as clicking a button or calling an API. Aside from that, you can manage access to an encryption key via the key policy. A key policy is a resource-based policy that you attach to a KMS key to control who can use that key and what KMS actions a user can perform to it. You can also use…

Contents