Encryption at rest and in transit in DynamoDB - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to enable encryption at rest for a DynamoDB table.

DynamoDB

aws dynamodb create-table --table-name MyTable --attribute-definitions AttributeName=Id,AttributeType=S --key-schema AttributeName=Id,KeyType=HASH --billing-mode PAY_PER_REQUEST --[1]

Drag options to blanks, or click blank then click option'

Asse-specification Enabled=true

Bencryption-enabled true

Cenable-encryption true

Dsse-enabled true

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect option names like 'encryption-enabled' or 'enable-encryption'.

Forgetting to enable server-side encryption explicitly.

To enable encryption at rest in DynamoDB, you use the --sse-specification Enabled=true option when creating the table.

2fill in blank

medium

Complete the code to specify the encryption type used for encryption at rest in DynamoDB.

DynamoDB

aws dynamodb create-table --table-name MyTable --attribute-definitions AttributeName=Id,AttributeType=S --key-schema AttributeName=Id,KeyType=HASH --billing-mode PAY_PER_REQUEST --sse-specification Enabled=true,[1]=AES256

Drag options to blanks, or click blank then click option'

ASSEType

BEncryptionMode

CEncryptionType

DEncryptionAlgorithm

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect parameter names like 'EncryptionType' or 'EncryptionAlgorithm'.

Confusing encryption type with encryption mode.

The correct parameter to specify the encryption type is SSEType. DynamoDB supports AES256 for encryption at rest.

3fill in blank

hard

Fix the error in the code to enable encryption in transit for DynamoDB using HTTPS endpoint.

DynamoDB

const AWS = require('aws-sdk');
const dynamodb = new AWS.DynamoDB({endpoint: 'https://dynamodb.us-west-2.amazonaws.com', [1]: true});

Drag options to blanks, or click blank then click option'

AuseSSL

BenableSSL

CsslEnabled

Dssl

Attempts:

3 left

💡 Hint

Common Mistakes

Using incorrect option names like 'useSSL' or 'enableSSL'.

Setting the endpoint to 'http' instead of 'https' when enabling SSL.

To enable encryption in transit (SSL/TLS) in AWS SDK for JavaScript, the correct option is sslEnabled: true.

4fill in blank

hard

Fill both blanks to configure a DynamoDB client with encryption in transit and a custom HTTPS endpoint.

DynamoDB

const AWS = require('aws-sdk');
const dynamodb = new AWS.DynamoDB({endpoint: '[1]', [2]: true});

Drag options to blanks, or click blank then click option'

Ahttps://dynamodb.us-east-1.amazonaws.com

BuseSSL

Chttp://dynamodb.us-east-1.amazonaws.com

DsslEnabled

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'http://' instead of 'https://' in the endpoint URL.

Using 'useSSL' instead of 'sslEnabled' option.

The endpoint must use HTTPS for encryption in transit. The option to enable SSL is sslEnabled: true.

5fill in blank

hard

Fill the blanks to create a DynamoDB table with encryption at rest enabled using AWS KMS key and encryption in transit.

DynamoDB

aws dynamodb create-table --table-name SecureTable --attribute-definitions AttributeName=UserId,AttributeType=S --key-schema AttributeName=UserId,KeyType=HASH --billing-mode PAY_PER_REQUEST --sse-specification Enabled=true,[1]=KMS --endpoint-url {{BLANK_3}}

Drag options to blanks, or click blank then click option'

AKMSMasterKeyId

BuseSSL

Chttps://dynamodb.us-west-1.amazonaws.com

DSSEType

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'KMSMasterKeyId' instead of 'SSEType' for specifying encryption type.

Using HTTP endpoint instead of HTTPS.

To specify AWS KMS for encryption at rest, use SSEType=KMS. To enable encryption in transit, use HTTPS endpoint.