vzradha / data-protection

Workshop and sample code that builders can use for experiential learning of AWS services that provide data protection. Services such as AWS KMS, AWS ACM, AWS CloudHSM and others will be explored

AWS Data Protection Workshops

If you are considering protecting data at rest and in transit within your AWS environments using methods such as encryption or certificate management, these workshops can help you learn in depth.

Ubiquitous Encryption

Data encryption provides a strong layer of security to protect data that you store within AWS services. AWS services can help you achieve ubiquitous encryption for data in transit as well as data at rest.

Workshops

Title	Description	Learning Time	Teaching Time With Discussion
Level 200: Server Side Encryption	This workshop demonstrates server side encryption on S3 using a boto3 python script	15 min	30 min
Level 200: Client Side Encryption	This workshop demonstrates client side encryption using a master key materials provider and python encryption SDK	15 min	30 min
Level 200: Client Side Encryption With Data Key Caching	This workshop demonstrates client side encryption with data key caching using the python encryption sdk	15 min	30 min
Level 300: Creating Private Certs ACM Private Certificate Authority - Mode-1	This workshop demonstrates how you create a AWS Certificate Manager private certificate authority(PCA) and use ACM PCA to sign a CSR to create a private certificate	40 mins	1 hour
Level 300: Creating Private Certs ACM Private Certificate Authority - Mode-2	This workshop demonstrates how you create a AWS Certificate Manager private certificate authority and use this CA to create private X.509 certififcates for a private domain and apply the cert on an application load balancer	40 mins	1 hour
Level 300: Creating a complete private CA hierarchy on AWS	This workshop demonstrates how you create a AWS Certificate Manager private certificate authority and use this CA to create private X.509 certififcates for a private domain and apply the cert on an application load balancer	1 hour	1 hour 30 mins
Level 300: ACM Private CA Best Practices, Monitoring and Templates for code signing certificates	This workshop demonstrates private CA best practices, monitoring and use of templates for code siging certs	1 hour 30 mins	2 hours
Level 300: KMS Managed keys and ACM Private CA best practices combo workshop	This workshop demonstrates to use KMS with AWS managed keys and completing a complete CA hiearchy on AWS	1 hour 40 mins	1 hour

License Summary

This sample code is made available under a modified MIT license. See the LICENSE file.