Q12

What is KMS? Explain envelope encryption.

Q: What is KMS? Explain envelope encryption.

> * **AWS KMS**: A managed service used to create, control, and rotate cryptographic keys. * **Envelope Encryption**: An encryption strategy combining symmetric speed with key management safety: 1. KMS generates a plaintext **Data Key** and an encrypted version of that Data Key. 2. The application uses the plaintext Data Key to encrypt data locally, then discards the plaintext key. 3. The encrypted data is stored alongside the encrypted Data Key. 4. To decrypt, the app

💬Answer

AWS KMS: A managed service used to create, control, and rotate cryptographic keys.
Envelope Encryption: An encryption strategy combining symmetric speed with key management safety:
1. KMS generates a plaintext Data Key and an encrypted version of that Data Key.
2. The application uses the plaintext Data Key to encrypt data locally, then discards the plaintext key.
3. The encrypted data is stored alongside the encrypted Data Key.
4. To decrypt, the application sends the encrypted Data Key to KMS to get the plaintext key back.

Apurv Gujjar

DevOps & Cloud Engineer

Specialized in:DevOpsAWSGCPKubernetesTerraformDocker

View Portfolio

What is KMS? Explain envelope encryption.

Related AWS Questions

What is cloud computing?

What is the difference between CapEx and OpEx?

Explain elasticity with a real-world example.

What is the difference between Public, Private, and Hybrid cloud models?

Apurv Gujjar

What is KMS? Explain envelope encryption.

Related AWS Questions

What is cloud computing?

What is the difference between CapEx and OpEx?

Explain elasticity with a real-world example.

What is the difference between Public, Private, and Hybrid cloud models?

Apurv Gujjar