Data protection: encryption in transit and at rest, AWS KMS, AWS Certificate Manager, and AWS Secrets Manager

By the end you’ll be able to

• Differentiate encryption at rest from encryption in transit and identify the security objective each provides.
• Identify AWS Key Management Service (AWS KMS) as the managed service for creating and controlling cryptographic keys used with AWS services and applications.
• Recognize AWS Certificate Manager (ACM) as the service for provisioning, managing, and deploying public and private SSL/TLS certificates for use with supported AWS services.