DynamoDB 3 Flashcards
1
Q
Encryption
How do you encrypt a DDB table at rest?
important
A
No choice, all tables are encrypted at rest automatically
2
Q
Encryption
Cost to encrypt your tables?
A
Free with default AWS Managed KMS key, fee for CMKs
3
Q
Encryption
What are the limitations if you use a CMK?
A
Can’t use with DAX
4
Q
Encryption
How do you turn on encryption for GSIs?
A
Automatic
5
Q
Encryption
What is the DDB Encryption Client used for?
important
A
Client-side encrypting data values
6
Q
Encryption
Why would you use DDB Encryption Client when the HTTPS connection is encrypted?
important
A
Your data past the DDB web service endpoint isn’t encrypted in transit within DDB
7
Q
Encryption
I accidentally deleted my CMK, what happens to my DDB table?
A
Table backed-up and archived automatically
