KMS-Encrypted App Stack: EBS + RDS + S3 with Key Policies
Encrypt EBS, RDS, and S3 with a customer managed CMK and enforce least-privilege key policies for the application role.
Difficulty: Intermediate · Duration: 2 hours
AWS services: KMS, EBS, RDS, S3, EC2