AWS Certified Data Analytics Specialty 2021 - Hands-On! - Kinesis Security

The video tutorial covers the security aspects of Amazon Kinesis, emphasizing its importance in exams. It explains how to control access using IAM policies and secure data with encryption in transit via HTTPS and at rest using KMS. The tutorial also discusses the challenges of implementing client-side encryption manually. Additionally, it introduces VPC endpoints for accessing Kinesis within a private network. The session concludes with a promise of more in-depth security discussions later in the course.

What is used to control access and authorizations to Kinesis?

• Access Keys

• Security Groups

• Firewall Rules

• IAM policies

How is data encrypted in transit when using Kinesis?

• Using VPN

• Using HTTPS endpoints

• Using TLS certificates

• Using SSH

What service is used for encryption at rest in Kinesis streams?

• AWS CloudHSM

• AWS KMS

• AWS WAF

• AWS Shield

What is a challenge of client-side encryption in Kinesis?

• It is automatically managed

• It is expensive

• It requires manual implementation

• It is not supported

What allows access to Kinesis within a private network?

• VPC Peering

• Direct Connect

• VPC Endpoints

• NAT Gateway