
Explore AWS KMS concepts and envelope encryption for symmetric keys, then build a serverless password manager with DynamoDB and a JWT authentication KMS server using Lambda, Cognito, and API Gateway.
Understand envelope encryption with KMS and customer managed keys. Encrypt the data key with a master key to store encrypted data and keys, enabling scalable, centralized key management.
Understand how KMS access control uses both the key policy and IAM permissions, with examples showing a test user able to generate a data key via either policy.
Learn to build a secure serverless password manager on AWS using KMS for envelope encryption, Lambda, DynamoDB, API Gateway, and Cognito, storing encrypted passwords with a composite key.
Explore asymmetric key cryptography in aws kms by generating an rsa 2048 key to sign and verify a json web token, using the public key for verification.
Explore JWT-based authentication using an authorization server to sign tokens with a private key and verify with a public key, plus signup and login lambdas, DynamoDB, and KMS.
Secure your AWS applications using Key Management Service (KMS)
This project-based crash course walks you through AWS KMS from the ground up, covering core encryption principles, key management, access control, and real-world hands-on demos.
You'll start by learning what KMS is, how encryption works in AWS, and the different key types based on ownership. Then you'll dive into envelope encryption, why it’s used, and implement it.
In the second part of the course, you’ll master KMS key access control using IAM policies, key policies, and grants.
You’ll also learn how to audit key usage with CloudTrail.
To make everything stick, you’ll build two practical projects:
A Serverless Password Manager
A JWT-based Authentication Server using asymmetric KMS keys (RSA)
By the end of this course, you’ll be able to:
Confidently explain how AWS KMS works
Apply envelope encryption in real-world scenarios
Control KMS access using IAM and key policies
Encrypt and protect secrets in AWS
Monitor and audit key usage using CloudTrail
Build secure serverless apps using KMS-backed encryption and JWTs
Who This Course Is For:
Anyone wanting to build secure, serverless architectures
Developers working with AWS want to understand KMS in depth
Learners prepping for AWS Developer or Security exams