Security - Encryption

Question 1

What is AWS KMS?

Answer 1

HA, Managed key encryption service for key storage, management, auditing to encrypt data.

Question 2

What are some feature of KMS?

Answer 2

regional based, keys can only be used in the region you create them
symmetric keys - single key for encrypting and decrypting
asymmetric - public & private key

Question 3

How is KMS configured?

Answer 3

Name & describe
Define administrative permissions
Define usage permissions
Encrypt things (S3) using KMS key
Objects will show what key was used to encrypt

Question 4

Which AWS services are integrated with KMS?

Answer 4

EBS
S3
Redshift
Elastic Transcode
WorkMail
RDS

Question 5

What is AWS Cloudtrail?

Answer 5

AWS CloudTrail is a web service that records AWS API calls for your account and delivers log files to you
sent to S3 bucket and you manage the retention
delivered every 5 minutes with 15 min delay
can be aggregated across regions and accounts

Question 6

What is AWS CloudWatch?

Answer 6

performance monitoring, resource utilization, operational performance, log aggregation, hooks to event triggers
real-time, metrics, alarms, notifications, custom metrics