AWS Data Protection
AWS Tutorial: AWS Data Protection
Welcome to the Data Protection lesson. If a hacker somehow bypasses your firewalls and steals an S3 hard drive, the data is useless to them if it is securely encrypted.
Why Learn Data Protection?
Data privacy laws (like GDPR and HIPAA) legally mandate that sensitive customer data be encrypted "At Rest" (saved on a hard drive) and "In Transit" (moving across the internet). Knowing how AWS automates encryption keeps your company legally compliant.
Tutorial Overview
In this tutorial, you will learn about:
- AWS KMS (Key Management Service)
- Amazon Macie
Encryption & Data Discovery
- AWS KMS (Key Management Service): Allows you to create and manage cryptographic keys to control the encryption of data across a wide range of AWS services. KMS is integrated tightly with S3, EBS, and RDS, allowing you to encrypt your databases with a single checkbox click!
- Amazon Macie: A machine learning-powered security service that automatically discovers, classifies, and protects sensitive data stored in Amazon S3. If someone accidentally uploads a spreadsheet full of unencrypted credit card numbers to S3, Macie will instantly flag it and alert your security team.
Exercise
?Which AWS service uses Machine Learning to scan Amazon S3 buckets and alert you if sensitive data (like unencrypted Social Security Numbers) is discovered?