This lab challenges you to design and implement an advanced data encryption solution for data at rest using AWS KMS and related services. You will explore various encryption techniques and configurations to ensure the security of sensitive data stored within AWS. Throughout the lab, you will create a robust encryption strategy, implement resource-based policies to ensure data integrity, and experiment with lifecycle management for secure data retention. By the end of this atelier, you will have implemented a secure, efficient, and cost-effective encryption solution in a realistic business scenario.
A healthcare company, HealthSecure Corp, needs to secure sensitive patient data stored in AWS. The data, primarily stored in Amazon S3, must be encrypted using AWS KMS. The company also requires resource-based policies to control access and ensure data integrity. There are strict regulations on data retention, and HealthSecure Corp needs to implement lifecycle management for compliance.
