Ravi Sir's Cards › AWS
Envelope encryption
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
GenerateDataKey: plain + encrypted.
What is it?
Encrypt file locally (AES-GCM).
How to do it
Store only the encrypted key.
Example
Wipe the plain key after use.