AWS Cloud Security Lab 5.1 Encrypting Data at Rest by Using AWS KMS

This lab uses AWS Key Management Service (AMS KMS) to encrypt data at rest. It will create an AWS KMS key, use it to encrypt objects stored in Amazon Simple Storage Service (Amazon S3), and use it to encrypt Amazon Elastic Block Store (Amazon EBS) volumes. It will also show how AWS CloudTrail provides an audit log of AWS KMS key usage and how disabling the key affects data access.