December 2017
Intermediate to advanced
410 pages
11h 5m
English
In this approach, instead of using CMK to directly encrypt our data, we generate a data key from CMK. This data key will be used to encrypt and decrypt our data.
The new data key can be generated with the help of the KMS generate data key operation. Using this operation, AWS KMS will return two values: the plaintext version of the data key and the ciphertext version of the data key:

We use the Plain Text Data version of the data key to encrypt our data for obtaining the Cipher Text Data:

Once the data is encrypted, we ...
Read now
Unlock full access