Encryption in AWS
- Subject Code :
CSC503
- University :
Other Exam Question Bank is not sponsored or endorsed by this college or university.
- Country :
Canada
Program: CS
Course: Cloud Security
Assignment 3: Encryption in AWS
Name: ___________________________________
- Which AWS service allows hardware-based cryptography for consumers who need to meet regulations? What is the kind of tenancy for this service?
- What is the difference between Client-side encryption and Server-side encryption?
- What is the default status quo for encryption in Amazon S3? How can you change it?
- Rose created an S3 bucket without encryption and stored about 100 objects. Later on, she decided to set encryption on for the bucket. What happens with the existing objects?
- Wilfred created an S3 bucket named acme-bucket with default settings. Then, he executed the command below in the AWS CLI. Discuss the usefulness of the command, justifying your opinion.
aws s3api put-bucket-encryption --bucket acme-bucket --server-side-encryption-configuration '{"Rules": [{"ApplyServerSideEncryptionByDefault": {"SSEAlgorithm": "AES256"}}]}'
6.Help Wilfred with the command above to apply bucket encryption with SSE-KMS if the master key had the ID ACME-Master-Key.
7.Explain where is the key and how it is managed after changing the encryption to SSE-KMS.
8. Wilfred needs to share some objects in the bucket with partners who are using their own AWS account. What issue will Wilfred have?
9. The command below might seem absurd. However, there are cases in which it might be necessary. Explain a use-case.
aws s3 cp s3://bucket/myfile s3://bucket/myfile --sse AES256
10. What is the command above using, SSE-S3 or SSE-KMS encryption? Modify the command to use the other type of encryption, so from SSE-S3 to SSE-KMS or vice-versa.
11. When implementing cryptography in a cloud environment, where is the worst place to store the keys that can create security implications? Chose an option among the following, justifying your answer with proper reasoning.
- With the cloud provider
- Off the cloud, with the data owner
- With a third-party provider, in a key escrow
12. When encrypting volumes with AWS EBS, where is the master key kept?
13. How many keys would be managed if you had 10 EC2 instances each with a different EBS volume attached? Justify your answer.
