Cyber Security Interview Questions and Answers › Cyber Security
How do you encrypt data at rest in AWS?
Data at rest is stored data. KMS (Key Management Service) makes and guards the keys, and logs every use in CloudTrail. If a disk or backup is stolen, encrypted data is useless to the thief.

Read card text
What this card says
Data at rest is stored data. KMS (Key Management Service) makes and guards the keys, and logs every use in CloudTrail. If a disk or backup is stolen, encrypted data is useless to the thief.
Learn more in the lesson: 30.4 Protecting Data: S3, Encryption and Secrets