4.1

4.1 Enable Encryption at rest for EBS, RDS, DynamoDB, and S3 in Console

Review and ensure that you have setup your development environment before going through the steps below.

Enable Volume Encryption in EBS

1. Go to the EC2 Console.
2. Click on Volumes.
3. Click the Create Volume button.
4. Select the Encrypt this volume checkbox.
5. Enter (default) aws/ebs in the Master Key field.
6. Click the Add Tag button.
7. Enter Name in the Key field and encrypted in the Value field.
8. Click the Create Volume button.
9. Select the checkbox next to the EBS volume you just created and click on the Actions button. Then, click on Attach Volume from the menu.
10. Search for an available EC2 instance in the Instance field.
11. Click the Attach button.
12. Verify the instance is attached under the Attachment Information column for the volume.

Enable Encryption for an RDS database

1. Go to the RDS Console.

Enable Encryption for a DynamoDB table

1. Go to the DynamoDB Console.

Enable Encryption for an S3 Bucket

1. Go to the S3 Console.