CertiPass LogoCertiPass

Implementing Data Encryption Across AWS with KMS and S3

INTERMEDIATE
150 minutes
5 tasks

In this lab, you will learn how to ensure data encryption in transit and at rest using AWS KMS and S3. Participants will create KMS keys and use them to encrypt data stored in S3, understanding both server-side and client-side encryption options. This hands-on experience will solidify your knowledge on securing data in AWS and complying with data privacy requirements.

Scenario

You are a data engineer responsible for securing sensitive customer data in an e-commerce company. Your task is to ensure that all data stored in Amazon S3 is encrypted using AWS KMS, guaranteeing compliance with strict data protection regulations.

Learning Objectives

  • Understand how to create and manage AWS KMS keys.
  • Implement client-side and server-side encryption for data in S3.
  • Ensure compliance with data protection regulations through encryption policies.

tasks (5)

task 1: Create a KMS key for data encryption

20 min

task 2: Configure S3 buckets with the new KMS key

30 min

task 3: Implement client-side encryption for upload to S3

40 min

task 4: Audit access and encryption logs with CloudTrail

30 min

task 5: Apply Data Masking Techniques for S3 Data using AWS Glue

40 min

Prerequisites

  • •Basic understanding of AWS KMS concepts
  • •Familiarity with S3 and bucket policies
  • •General knowledge of AWS CLI and SDK usage

Skills Tested

Creating and managing AWS KMS keysConfiguring S3 for server-side and client-side encryptionUsing AWS Glue for data maskingAuditing with AWS CloudTrail

References