Utilizing Data Encryption

Question 1

Key Management Service

Answer 1

KMS allows you to generate and store encryption keys

Question 2

CloudHSM

Answer 2

is a hardware security module (HSM) used to generate encryption keys. It is a dedicated hardware that AWS give you.

Question 3

Secrete Manager

Answer 3

allows you to manage and retrieve secrets (passwords or keys).

Built-in integration with RDSM Redshift and DocumentDB.