AWS Key Management Service
ããŒã¿ã®æå·åãããžã¿ã«çœ²åã«äœ¿çšããããŒãäœæããŠç®¡çãã
ã¡ãªãã
-
çµ±åããããµãŒãã¹ãã¢ããªã±ãŒã·ã§ã³å
šäœã§ã®äžå
çãªããŒã®ç®¡çãšããªã·ãŒã®å®çŸ©ã 1 ãæããå®è¡ããŸãã
-
AWS Encryption SDK ããŒã¿æå·åã©ã€ãã©ãªã䜿çšããŠãã¢ããªã±ãŒã·ã§ã³å
ã®ããŒã¿ãæå·åããŸãã
-
é察称ããŒãã¢ã䜿çšããŠçœ²ååŠçãå®è¡ããããžã¿ã«çœ²åãæ€èšŒããŸãã
-
ã¡ãã»ãŒãžã®æŽåæ§ãšä¿¡é Œæ§ã確ä¿ãã Hash-based Message Authentication Code (HMAC) ãã»ãã¥ã¢ã«çæããŸãã
AWS KMS ãšã¯?
AWS KMS ã䜿çšããŠãAWS ã¯ãŒã¯ããŒãå
šäœã§ã®ããŒã¿æå·åãããŒã¿ã®ããžã¿ã«çœ²åãAWS Encryption SDK ã䜿çšããã¢ããªã±ãŒã·ã§ã³å
ã§ã®æå·åãã¡ãã»ãŒãžèªèšŒã³ãŒã (MAC) ã®çæãšæ€èšŒãè¡ããŸããçŸå°ã®èšèªã§èŠèŽããã«ã¯ããã¡ãåç»ãéžæããèšå®ã¢ã€ã³ã³ãã¯ãªãã¯ããŠããåžæã®åå¹ãªãã·ã§ã³ãéžæããŠãã ããã
ãŠãŒã¹ã±ãŒã¹
ãŠãŒã¶ãŒãå¶åŸ¡ããŠç®¡çãã KMS ããŒã䜿çšããããšã§ãAWS KMS ã§ãµãŒããŒåŽã®æå·åãã¢ã¯ãã£ãåããŸãã
AWS Encryption SDK ã䜿çšããŠãã¢ããªã±ãŒã·ã§ã³å ã®æå·åæäœãã»ãã¥ã¢ã«åŠçããŸãã
é察称 KMS ããŒã䜿çšããããšã§ãAWS KMS ã§ã®çœ²åæäœãä¿è·ããŸãã
AWS Database Encryption SDK ã䜿çšãããšãããŒã¿ããŒã¹å ã®æ©å¯ã¬ã³ãŒããç°¡åã«æå·åããŠã»ãã¥ã¢ã«æ€çŽ¢ã§ããŸãã