Data security in the AWS platform can be classified into two broad categories:
- Protecting data at rest
- Protecting data in transit
Furthermore, data security has the following components that help in securing data in multiple ways:
- Data encryption
- Key Management Services (KMS)
- Access control
- AWS service security features
AWS provides you with various tools and services to secure your data in AWS when your data is in transit or when your data is at rest. These tools and services include resource access control using AWS Identity and Access Management (IAM), data encryption, and managed KMS, such as AWS KMS for creating and controlling keys used for data encryption. The AWS KMS provides multiple options for managing your entire Key Management Infrastructure (KMI). Alternatively, you also have the option to go with the fully managed AWS CloudHSM service, a...
