Data encryption
If you have used AWS services before, you might be familiar with the AWS Shared Responsibility Model, where AWS manages and is responsible for securing underlying cloud infrastructure, and you are responsible for protecting the data and applications hosted on this infrastructure. If you would like to read through the AWS Shared Responsibility Model, you can go to https://aws.amazon.com/compliance/shared-responsibility-model/.
When it comes to protecting the data, you can perform encryption on them using AWS KMS or you can also perform client-side encryption before writing to AWS resources. Let us look at the encryption of different resources that you can perform to safeguard your data:
- Knowledge bases: KMS can be used to encrypt data that is in transition for knowledge bases. During the creation or update of a data source, you can provide the KMS key ARN to encrypt the ingested data, ensuring the confidentiality of your knowledge base content. Figure 12.1...
