A company has a three-tier environment on AWS that ingests sensor data from its users' devices The traffic flows through a Network Load Balancer (NIB) then to Amazon EC2 instances for the web tier and finally to EC2 instances for the application tier that makes database calls
What should a solutions architect do to improve the security of data in transit to the web tier?
A: How do you protect your data in transit?
Best Practices:
Implement secure key and certificate management: Store encryption keys and certificates securely and rotate them at appropriate time intervals while applying strict access control; for example, by using a certificate management service, such as AWS Certificate Manager (ACM).
Enforce encryption in transit: Enforce your defined encryption requirements based on appropriate standards and recommendations to help you meet your organizational, legal, and compliance requirements.
Automate detection of unintended data access: Use tools such as GuardDuty to automatically detect attempts to move data outside of defined boundaries based on data classification level, for example, to detect a trojan that is copying data to an unknown or untrusted network using the DNS protocol.
Authenticate network communications: Verify the identity of communications by using protocols that support authentication, such as Transport Layer Security (TLS) or IPsec.
https://wa.aws.amazon.com/wat.question.SEC_9.en.html
Raina
3 months agoJeniffer
2 months agoArtie
2 months agoJustine
3 months agoAlline
3 months agoRoyce
3 months agoAvery
3 months agoAlline
3 months agoAdria
3 months agoVirgie
2 months agoCheryl
2 months agoCherri
2 months agoFrancene
2 months agoHector
4 months agoMichal
4 months agoHarrison
2 months agoKristofer
3 months agoMaynard
3 months agoLai
4 months agoRoyce
4 months agoTambra
4 months agoRasheeda
3 months agoMickie
4 months ago