The final section of this book covers encryption. We'll look at the different types of encryption used throughout AWS services and how to configure and implement encryption across a variety of different services. Then, we'll take a deep dive look at the Key Management Service (KMS). It's important that you understand this service and how it interacts with a number of different AWS services. We'll also look at another encryption service, AWS CloudHSM, how this differs from KMS, and when you should use one over the other. 

Next, we'll look at data security, where we'll cover a range of different AWS services in order to learn how to configure and implement security features. These services include Amazon Elastic Block Store (EBS), Amazon Elastic File Systems (EFS), Amazon Simple Storage Service (S3), Amazon Relational Database Service (RDS), and Amazon DynamoDB.

Finally, to round off this section, we will provide two mock tests that will assess your understanding of the content in this book. Each mock test will contain 65 questions for you to answer.

By the end of this section, you will be able to implement data encryption features across a wide selection of AWS services to ensure your data remains protected at all times. 

This section comprises the following chapters:

• Chapter 16, Managing Key Infrastructure
• Chapter 17, Managing Data Security
• Chapter 18, Mock Tests