From the course: Hands-On Development in AWS

Unlock this course with a free trial

Join today to access over 24,400 courses taught by industry experts.

Using message encryption

Using message encryption

- Whenever you create a queue in SQS, it by default enables queue encryption. However, it's using a key managed by the SQS service. I want to give you a demonstration of using your own keys and using the Amazon Key management service. So, if we come in here to create a queue and we scroll down slightly, we can see encryption is enabled by default, and it uses this SQS key. We want to enable the key management service key, however, I do need to create one. So, let's head over to the KMS service. Let me duplicate this tab. Also, I want to call out this piece of documentation here, managing access to your encrypted Amazon SQS queue, using least privileged Amazon SQS policy and AWS KMS key policy. This is some recommended reading for you as you are playing with these various services. Let's go to the KMS service, and I'm going to create a symmetric key. Now, these keys here is from my testing of this particular demo. The reason they show up here is because you cannot immediately delete a…

Contents