AWS Certified Data Analytics Specialty 2021 – Hands-On - AWS Services Security Deep Dive (1/3)

The video tutorial covers security features of various AWS services, including Kinesis, SQS, AWS IoT, S3, Glacier, and DynamoDB. It discusses encryption methods, IAM roles, VPC endpoints, and policies to ensure secure data handling and access control. The tutorial emphasizes the importance of these security measures for exam preparation.

What is required to perform client-side encryption with Kinesis?

• Use AWS-provided encryption libraries

• Kinesis provides built-in client-side encryption

• Use your own encryption libraries

• No encryption is needed

Which AWS service requires an IAM policy to allow usage and has a second level of security with access policies?

• AWS S3

• AWS IoT

• AWS SQS

• AWS Kinesis

What type of certificates are used in AWS IoT for device security?

• IAM certificates

• X509 certificates

• SSL certificates

• S3 certificates

What is a key feature of AWS IoT policies?

• They do not support group management

• They are JSON documents similar to IAM policies

• They can only be attached to individual devices

• They are XML documents

Which of the following is NOT a security feature of AWS S3?

• Access control lists

• IoT policies

• Server-side encryption

• VPC endpoints

What is the purpose of vault lock policies in AWS Glacier?

• To provide client-side encryption

• To encrypt data in transit

• To prevent data deletion for regulatory reasons

• To enable faster data retrieval

Which encryption method is used for DynamoDB streams?

• Client-side encryption

• No encryption is used

• Server-side encryption with S3

• The same encryption as the DynamoDB table