AWS cryptographic services and tools
AWS's cryptographic services utilize a wide range of encryption and storage technologies that can assure the integrity of your data at rest or in transit. AWS offers several tools for cryptographic operations:
-
AWS CloudHSM provides hardware security modules (HSMs) that can securely store a variety of cryptographic keys, including root keys and data keys.
-
AWS Key Management Service (KMS) provides tools for generating root keys and other data keys. AWS KMS also interacts with many other AWS services to encrypt their service-specific data.
-
AWS Encryption SDK provides a client-side encryption library for implementing encryption and decryption operations on all types of data.
-
AWS Database Encryption SDK provides a client-side encryption library for encrypting data tables before sending them to a database service, such as Amazon DynamoDB.
-
AWS Secrets Manager provides encryption and rotation of encrypted secrets used with AWS-supported databases
.
Many AWS services rely on these cryptographic services during data transfer or storage. For a list of such services and an overview of how they use cryptographic practices, see Other AWS Services.
AWS cryptographic services comply with a wide range of cryptographic security standards,
making it easy for you to protect your data without worrying about governmental or
professional regulations. For a full list of AWS data security standard compliances, see
AWS Compliance
Programs
