Ravi Sir's Cards › AWS
kms encrypt vs Data key
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Size
kms encrypt
Up to 4 KB.
Data key
Any size, local.
Key points
Network call per item.
One call, then local crypto.
Example
aws kms encrypt
Use when
Tokens, small secrets.
Files and backups.