KMS, Secrets Manager and Parameter Store

DVA-C02 · Security · Updated

Envelope encryption with AWS KMS, key policies, and choosing Secrets Manager or Systems Manager Parameter Store for credentials and configuration.

This lesson is part of full DVA-C02 access

The first 2 DVA-C02 lessons are free. Full access opens every lesson with its practice questions, and the exam-style DVA-C02 question bank.

In this lesson
  • Envelope encryption
  • Key types and access
  • Secrets Manager vs Parameter Store
  • Encryption on common services
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

DVA-C02 course outline

All 7 lessons · Course overview
  1. Lambda triggers, limits and configurationDevelopment with AWS Services Free
  2. DynamoDB keys, indexes and capacityDevelopment with AWS Services Free
  3. Cognito user pools vs identity poolsSecurity Full access
  4. KMS, Secrets Manager and Parameter StoreSecurity Full access
  5. Deployment strategies for Beanstalk and LambdaDeployment Full access
  6. SAM, CloudFormation and CI/CD pipelinesDeployment Full access
  7. X-Ray, CloudWatch and caching for troubleshootingTroubleshooting and Optimization Full access