Access
StationX Infrastructure Labs — 3 attempts per lab
🔒 Add StationX Infrastructure Labs — $149 / year · 3 attempts per lab
Already have access? Sign in.
New to this? Try a free practice lab — a scripted hacking challenge in your browser, no account needed.
What you'll do
In this lab, you will protect data in transit and at rest by using encryption.
- Create an Amazon Key Management Service (KMS) key to manage the security of data at rest
- Modify the key policy to allow the Amazon CloudTrail service to interact with KMS
- Create a CloudTrail trail that logs server-side encryption by using KMS
- Encrypt the data in an S3 bucket by using a KMS key
Note: Once you begin the lab, you will not be able to pause, save, or exit and then return to your lab. Please ensure that you have set aside enough time to complete the lab before you start.
- ⏱ About 30 minutes
- Counts towards: AWS Certified CloudOps Engineer - Associate (exam SOA-C03) · AWS Certified Security — Specialty (exam SCS-C03) · AWS Solutions Architect Associate (exam SAA-C03) · Certified Cloud Security Professional (exam CCSP) · CompTIA Cloud+ (exam CV0-004)
Roadmaps that use this lab
- CCSP — Certified Cloud Security Professional — step 2: Cloud platform, infrastructure and operations
- CompTIA Cloud+ (CV0-004) — step 3: Secure the cloud
- AWS Certified Solutions Architect — Associate — step 3: Secure, monitor and recover it
- AWS Certified Security — Specialty — step 1: Security services in depth
- Cloud Security Engineer — career path — step 5: Secure AWS
- Cloud Security Engineer — career path — step 8: Secure cloud workloads, certified
