Securing stored data
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
protect stored data with encryption and access controls.
Planned topics
- Encrypt at rest by default; decide who manages keys: provider-managed or customer-managed keys.
- Encrypt in transit with TLS.
- Block public access by default; grant by role with least privilege; use short-lived credentials.
- Log access to sensitive stores and review.
- Classify data so controls match sensitivity.
Draft outline details
Demonstration
a control checklist per bucket: public access blocked, encryption on, key owner, access roles, logging, versioning, retention.
Check your understanding
What is the safest default for storage public access?
Show answer
Blocked.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.