To ensure data and applications on the AWS cloud are secure, AWS developers require a sound understanding of which tools and services to use in a given situation and how to use them.

In this course, you’ll begin by exploring how encryption is used to protect data and how the Key Management Service (KMS) is used to manage and control access keys. You’ll then use the KMS console and the AWS CLI to create a customer master key (CMK). Next, you’ll create secure string parameters using the AWS Systems Manager Parameter Store. You’ll then examine the Security Token Service (STS) in AWS and how it is used to obtain temporary restricted-privilege credentials for AWS IAM users. Lastly, you’ll work with encryption configurations to manage and monitor encryption requirements using encryption headers.