Hands-on Lab

Encryption is crucial to implement on AWS, and that is the topic of this chapter’s lab. You will create an S3 bucket and encrypt the data within it with a KMS key that you create yourself. By working through this exercise, you will become familiar with using encryption and managing KMS keys:

1. Log in to the AWS Management Console – http://console.aws.amazon.com/.
2. Navigate to Key Management Service.
3. From the left-hand menu, select Customer managed keys.
4. Click Create key.
5. Select Symmetric and Encrypt and Decrypt.
6. Click Next.
7. Give your key an alias, that is, a name it will be known by. Click Next.
8. Select which users and roles can administer this key. Make sure you select whichever user or role that you are logged in as.
9. Click Next.
10. Select which users or roles can use this key. Make sure you select whichever user or role that you are logged in as.
11. Click Next.
12. On the review page, you will see that the key policy...