Ravi Sir's Cards › AWS
KMS data keys
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Big files need envelope encryption.
What is it?
generate-data-key: plain + encrypted.
--key-spec AES_256
How to do it
Encrypt locally, shred the plain key.
Example
Disable before schedule-key-deletion.
--pending-window-in-days 7