Skip to main content

Data Protection

Encrypt data at rest and in transit using KMS and encryption services.

Encryption at Rest​

  • S3 server-side encryption
  • EBS volume encryption
  • RDS encryption

Encryption in Transit​

  • TLS/SSL implementation
  • VPN connections
  • Certificate management

Key Management​

  • AWS KMS key policies
  • Customer managed keys
  • Key rotation strategies

Data Classification​

  • Sensitive data identification
  • Data loss prevention
  • Compliance requirements