AWS KMS — Encryption Keys, Control & Audit | AWS Security Specialty SCS-C02

AWS KMS is where you create and control the keys that encrypt your data across AWS. This module walks through key types, who actually controls a key, automatic rotation, envelope encryption, and the CloudTrail audit trail that proves it all.

What you'll learn:
• AWS-owned vs AWS-managed vs customer-managed keys (CMKs) — and when each is the answer
• Symmetric vs asymmetric key specs, and choosing the right one
• Key policy vs IAM vs grants — the key policy is the primary gate
• Automatic rotation, envelope encryption, and the 7-to-30 day deletion window

🔗 Resources
• Course toolkit (open source): https://github.com/kkmookhey/humboldt
• Transilience AI — agentic AI for security: https://www.transilience.ai
• Shasta Free Cloud Security Posture scan (Open Source): https://shasta.transilience.cloud/signin
• Network Intelligence — cybersecurity services: https://www.networkintelligence.ai

#AWS #CloudSecurity #AWSKMS #SCSC02 #AWSSecurity #Encryption #KeyManagement #EnvelopeEncryption #CloudCertification #NetworkIntelligence

Видео AWS KMS — Encryption Keys, Control & Audit | AWS Security Specialty SCS-C02 канала Network Intelligence