Encryption at rest and in transit in DynamoDB - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does encryption at rest mean in DynamoDB?

Encryption at rest means that the data stored in DynamoDB tables is automatically encrypted on the disk. This protects your data from unauthorized access if someone tries to read the storage directly.

beginner

What is encryption in transit in DynamoDB?

Encryption in transit means that data moving between your application and DynamoDB is encrypted using secure protocols like TLS. This keeps your data safe from eavesdropping while it travels over the internet.

intermediate

How does DynamoDB handle encryption at rest by default?

DynamoDB automatically encrypts all data at rest using AWS owned keys unless you choose to use your own customer managed keys for more control.

beginner

Why is encryption in transit important when using DynamoDB?

Encryption in transit protects your data from being intercepted or read by attackers while it moves between your app and DynamoDB. It ensures privacy and data integrity during communication.

intermediate

Can you disable encryption at rest in DynamoDB?

No, encryption at rest is always enabled in DynamoDB to protect your data. You can choose the key type (AWS owned or customer managed), but you cannot turn off encryption at rest.

What protects DynamoDB data stored on disk from unauthorized access?

A Encryption in transit

B Backup copies

C Access keys

D Encryption at rest

Encryption at rest secures data stored on disk by encrypting it, preventing unauthorized access.

Which protocol is commonly used to encrypt data in transit between your app and DynamoDB?

A FTP

B TLS

C HTTP

D SMTP

TLS (Transport Layer Security) encrypts data in transit to keep it safe from interception.

Can you turn off encryption at rest in DynamoDB?

A No, it is always enabled

B Only for certain tables

C Only during backups

D Yes, anytime

Encryption at rest is always enabled in DynamoDB to protect your data.

What is the benefit of using customer managed keys for encryption at rest in DynamoDB?

A More control over key management

B Faster queries

C Lower cost

D No encryption needed

Customer managed keys let you control key rotation and permissions.

Encryption in transit protects data when it is:

A Stored on disk

B Being backed up

C Moving between client and DynamoDB

D Deleted permanently

Encryption in transit secures data while it travels between your app and DynamoDB.

Explain the difference between encryption at rest and encryption in transit in DynamoDB.

Think about where the data is when each encryption applies.

Describe how DynamoDB ensures your data is secure using encryption.

Consider both storage and communication security.