Encryption best practices for AWS services

This section includes best practices and recommendations for the following AWS services:

• AWS CloudTrail

• Amazon DynamoDB

• Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Elastic Block Store (Amazon EBS)

• Amazon Elastic Container Registry (Amazon ECR)

• Amazon Elastic Container Service (Amazon ECS)

• Amazon Elastic File System (Amazon EFS)

• Amazon Elastic Kubernetes Service (Amazon EKS)

• AWS Encryption SDK

• AWS Key Management Service (AWS KMS)

• AWS Lambda

• Amazon Relational Database Service (Amazon RDS)

• AWS Secrets Manager

• Amazon Simple Storage Service (Amazon S3)

• Amazon Virtual Private Cloud (Amazon VPC)