AWS Security and Encryption Flashcards
KMS, SSM Parameter Store, AWS Shield, AWS WAF
What are the two types of KMS Keys?
Symmetric and Asymmetric KMS Key
What KMS Key Type can be used to provide encryption outside of AWS by users who can’t call the KMS API
Asymmetric (RSA and ECC Key Pairs)
A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora Database. The EC2 instances connect to the database by using usernames and passwords that are stored locally in a file. The company wants to minimize the operational overhead
A company performs monthly maintenance on its AWS infrastructure on its AWS infrastructure. During these maintenance activities, the company needs to rotate the credentials for its Amazon RDS for MySQL databases across multiple AWS Regions. Which solution will meet these requirements with the LEAST operational overhead?
Store the credentials as secrets in AWS Secrets Manager. Use multi-Region secret replication for the required Regions. Configure Secrets Manager to rotate the secrets on a schedule.
