Using AWS data protection services for innovation and automation
summary
Covers concrete tools and outcomes: ACM plus AWS Private CA issues and auto‑renews TLS certs, Private CA supports three‑tier hierarchies and cross‑account sharing via RAM, and the Private CA Connector for Active Directory is coming soon; KMS stores keys in FIPS 140‑2 L3 HSMs with options for CloudHSM custom key stores and External Key Store, S3 Bucket Keys reduce KMS calls and save up to 99% on S3 KMS costs, Database Encryption SDK is in preview for attribute‑level searchable encryption on DynamoDB, AWS Payment Cryptography runs PCI‑grade operations, and Secrets Manager offers replication, rotation down to four‑hour cadence and 10,000 TPS retrieval with CloudTrail and Config for provable controls.
AI-written summary · about
chapters (27)
- 0:00Introduction
- 5:06AWS services
- 8:17The Big Journey
- 9:06Data and Transit Encryption
- 10:00Certificates
- 11:57ACM
- 14:28AWS Private CA
- 16:11CA Hierarchy
- 17:21AWS Resource Access Manager
- 18:15AWS Private CA Connector
- 19:24Data at Rest Encryption
- 20:07AWS KMS
- 24:45External Key Manager
- 26:23Envelope Encryption
- 27:51S3 Bucket Keys
- 29:00AWS Database Encryption SDK
- 30:57AWS Payment Cryptography
- 32:50Benefits of AWS Payment Cryptography
- 35:01Data Journey
- 36:33Features
- 40:39Rotation
- 41:45Flexibility in rotation
- 43:14RDS Secrets Manager integration
- 44:31How AWS can help customers
- 45:27AWS Config
- 48:12Sample workload
- 54:41Wrap up
related talks
39mExplorations of cryptography research
45mLet's Encrypt Everything, Really Everything
27mIntroduction to AWS Security
26mProtecting your data in Amazon S3
51mUsing Key Management Service for data protection
27mEncrypting 6 Petabytes of Customer Data with AWS KMS
56mSecure and increase mobile workforce productivity with AWS for MDM
20mSecuring workloads using data protection services