Tag: Encryption

Feed: Recent Announcements. Amazon Simple Queue Service (SQS) now provides managed server-side encryption using SQS owned encryption keys (SSE-SQS) to protect sensitive data. SSE-SQS helps you build security-sensitive applications to support your encryption compliance and regulatory requirements.  Amazon SQS is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Using Amazon SQS, you can send, store, and receive messages between software components at any volume without losing messages or requiring other services to be available. Customers are increasingly decoupling their monolith applications to microservices and moving sensitive workloads to Amazon ... Read More

Feed: Recent Announcements. Amazon Translate is a neural machine translation service that delivers fast, high quality, affordable, and customizable language translation. Starting today, you can use your own encryption keys from the AWS Key Management Service (KMS) to encrypt data placed in your S3 bucket. Up until now, Amazon Translate used Amazon S3-SSE to encrypt your data. AWS KMS makes it easy for you to create and manage keys, while controlling the use of encryption across a wide range of AWS services and in your applications. AWS KMS is a secure and resilient service that uses FIPS 140-2 validated hardware security modules to ... Read More

Feed: Recent Announcements. Amazon Relational Database Service (Amazon RDS) for Oracle now supports four new customer modifiable sqlnet.ora client parameters for the Oracle Native Network Encryption (NNE) option. Amazon RDS for Oracle already supports server parameters which define encryption properties for incoming sessions. These client parameters apply to outgoing connections such as those used by database links. You can use the SQLNET.ENCRYPTION_CLIENT parameter to turn encryption on for the client, SQLNET.ENCRYPTION_TYPES_CLIENT to specify a list of encryption algorithms for the client to use, SQLNET.CRYPTO_CHECKSUM_CLIENT to specify the checksum behavior for the client, and SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT to specify a list of crypto-checksum algorithms ... Read More

Feed: Recent Announcements. Amazon Managed Streaming for Apache Kafka (Amazon MSK) now supports the simultaneous use of multiple authentication modes and updates to encryption-in-transit settings for Amazon MSK clusters. These features allow you to migrate your clients seamlessly from one authentication mode to another and update encryption settings to match those changes.  With this launch, you can now activate any combination of authentication modes (mutual TLS, SASL SCRAM, or IAM Access Control) on new or existing clusters, which is useful if you are migrating to a new authentication mode or need to run multiple authentication modes simultaneously. You also have the ... Read More

Feed: Recent Announcements. AWS Elemental MediaPackage now supports version 2.0 of the Secure Packager and Encoder Key Exchange (SPEKE) API. SPEKE v2 makes it possible to use native Content Protection Information Exchange Format (CPIX) 2.3 documents which allows for the use of multiple encryption keys for different media tracks. With MediaPackage and SPEKE v2 you can now use two keys, one for audio tracks and one for video tracks with live DASH and CMAF streams, with support for more complex encryption models for content protection requirements to follow. AWS has also launched a new SPEKE v2.0 Qualification Program for partner DRM ... Read More

Feed: AWS Architecture Blog. An AWS security best practice from The 5 Pillars of the AWS Well-Architected Framework is to ensure that data is protected both in transit and at rest. One option is to use SSL/TLS to encrypt data in transit, and use cryptographic keys to encrypt data at rest. To meet your organization’s disaster recovery goals, periodic snapshots of databases should be scheduled and stored across Regions and across administrative accounts. This ensures quick Recovery Point Objective (RPO) and Recovery Time Objective (RTO). From a security standpoint, these snapshots should also be encrypted. Consider a scenario where one administrative AWS ... Read More

Feed: Cloudwards. Author: Aleksander Hougen; If you’re using a cloud storage service without zero-knowledge encryption — or just extra concerned with data security and privacy in general — chances are you’ll want to use dedicated encryption software to protect your files. In this Cryptomator vs Boxcryptor comparison, we’ll take a look at two of the top tools in this category and decide which is better. Key Takeaways: Boxcryptor and Cryptomator are easy to use and highly secure software that lets you encrypt files before uploading them to cloud storage providers.Boxcryptor comes with a lot more features and integrations than Cryptomator, ... Read More

Feed: Recent Announcements. Today, we are announcing new functionality in AWS Control Tower that provides you the option to use a single customer provided AWS Key Management Service (AWS KMS) key to secure the AWS Control Tower deployed services (AWS CloudTrail, AWS Config) and the associated AWS S3 data. The use of AWS KMS encryption gives you enhanced encryption over the default SSE-S3 encryption used by AWS Control Tower. The integration of AWS KMS support into AWS Control Tower aligns with the AWS Foundational Security Best Practices that recommend for an added layer of security for your sensitive log files, ... Read More

Feed: Recent Announcements. Amazon Rekognition Custom Labels supports the ability to use an AWS Key Management Service (KMS) key, to encrypt the image data delivered to the Rekognition Custom Labels service to train your custom machine learning model. By default, Amazon Rekognition Custom Labels encrypts the image data at rest using server-side encryption. With this release, if you provide Amazon Rekognition Custom Labels with your KMS key or alias ARN, Amazon Rekognition Custom Labels will use that KMS key instead to encrypt your training and test images. To get started, select an existing KMS key or create a new KMS ... Read More

Feed: Recent Announcements. You now can further enhance the security of your applications by encrypting data in transit between your applications and your Amazon DynamoDB Accelerator (DAX) clusters, and between the nodes within a DAX cluster. To use this new feature, enable encryption in transit when creating a DAX cluster and use the latest version of any of the DAX clients. If you enable encryption in transit for a DAX cluster, all requests and responses between your applications and clusters are encrypted by Transport Layer Security (TLS), and connections to the cluster can be authenticated by verification of a cluster ... Read More