KMS for key management in AWS - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS KMS?

AWS KMS (Key Management Service) is a service that helps you create and control encryption keys used to protect your data in the cloud.

beginner

What is a Customer Master Key (CMK) in AWS KMS?

A CMK is a logical key that you create in AWS KMS to encrypt and decrypt data keys or other data directly. It controls access and usage of the keys.

beginner

How does AWS KMS help with data security?

AWS KMS encrypts your data using keys that you control. It manages key lifecycle, access permissions, and auditing to keep your data safe.

intermediate

What is the difference between symmetric and asymmetric keys in AWS KMS?

Symmetric keys use the same key to encrypt and decrypt data. Asymmetric keys use a pair of keys: one to encrypt and a different one to decrypt.

beginner

Why should you use AWS KMS instead of managing your own encryption keys?

AWS KMS handles key storage, security, rotation, and auditing automatically, reducing the risk of key loss or misuse compared to manual key management.

What does AWS KMS primarily manage?

A Encryption keys

B Virtual machines

C Network traffic

D Database backups

AWS KMS manages encryption keys to protect your data.

Which key type in AWS KMS uses a pair of keys for encryption and decryption?

A Symmetric key

B Asymmetric key

C Master key

D Data key

Asymmetric keys use a public and private key pair for encryption and decryption.

What is a Customer Master Key (CMK) used for in AWS KMS?

A To manage user permissions

B To store data backups

C To encrypt and decrypt data keys

D To monitor network traffic

CMKs encrypt and decrypt data keys or data directly.

Which of the following is NOT a benefit of using AWS KMS?

A Automatic key rotation

B Centralized key management

C Access control and auditing

D Manual key storage on local devices

AWS KMS stores keys securely in the cloud, not manually on local devices.

How does AWS KMS improve data security?

A By encrypting data with keys you control

B By deleting all data after use

C By sharing keys publicly

D By disabling encryption

AWS KMS encrypts data using keys that you manage, enhancing security.

Explain what AWS KMS is and how it helps protect data.

Think about how keys help lock and unlock data.

Describe the difference between symmetric and asymmetric keys in AWS KMS.

Consider how one key or two keys are used.