Data Encryption and Secrets Management

Question 1

Allows you to generate and store encryption keys

Answer 1

Key Management Service (KMS)

Question 2

Keys managed by AWS

Answer 2

Encryption keys

Question 3

Used to create encrypted EBS volumes

Answer 3

KMS

Question 4

Hardware security module used to generate encryption keys

Answer 4

CloudHSM

Question 5

Dedicated hardware for security that generates and manages your own encryption keys

Answer 5

CloudHSM

Question 6

Manages and retrieves secrets (passwords or keys) that encrypts secrets at rest

Answer 6

Secrets Manager

Question 7

Allows you to retrieve database credentials with an API call

Answer 7

Secrets Manager