Encryption
Protecting data with keys so only authorized parties can read it, at rest and in transit.
Encryption protects AI workloads at two layers: data at rest (in Amazon S3, EBS, or RDS) and data in transit (over TLS between services). AWS Key Management Service (KMS) creates and controls the keys used to encrypt training datasets, model artifacts, and inference outputs, and Amazon SageMaker integrates with KMS for training jobs, endpoints, and notebooks. The key exam distinction is AWS managed keys, which AWS creates and rotates automatically, versus customer managed keys, which give you control over key policies, rotation, and access revocation — often a compliance requirement in regulated industries.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →