KMS keys, Secrets Manager and S3 access control

SOA-C03 · Security and Compliance · Updated

Encrypt with KMS keys and rotation, rotate database passwords with Secrets Manager, and lock down S3 with policies, logging and Block Public Access.

This lesson is part of full SOA-C03 access

The first 2 SOA-C03 lessons are free. Full access opens every lesson with its practice questions, and the exam-style SOA-C03 question bank.

In this lesson
  • IAM evaluation basics
  • KMS
  • Secrets Manager versus Parameter Store
  • S3 protection
  • Monitoring security posture
  • Exam traps
  • Practice questions

Get full access Try the free practice exam Log in

SOA-C03 course outline

All 8 lessons · Course overview
  1. CloudWatch agent, metrics and alarmsMonitoring, Logging, Analysis, Remediation, and Performance Optimization Free
  2. EventBridge, Config and automated remediationMonitoring, Logging, Analysis, Remediation, and Performance Optimization Free
  3. AWS Backup, snapshots and S3 replicationReliability and Business Continuity Full access
  4. Load balancing and Auto Scaling for availabilityReliability and Business Continuity Full access
  5. CloudFormation stacks, failures and driftDeployment, Provisioning, and Automation Full access
  6. Systems Manager patching and fleet managementDeployment, Provisioning, and Automation Full access
  7. KMS keys, Secrets Manager and S3 access controlSecurity and Compliance Full access
  8. Route 53 routing, VPC connectivity and DNSNetworking and Content Delivery Full access