NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Cloud Security
Encryption at Rest and in Transit
Master data protection by implementing robust encryption for data at rest (KMS, CMKs) and in transit (TLS/mTLS) across multi-cloud environments.
Room tasks
1What Is Cloud Encryption and Why Does It Matter
2KMS & Managed Encryption Keys
3Guided Lab: Enforcing Encryption Across a Cloud Environment
Frequently Asked Questions
What is the difference between encryption at rest and in transit?
Encryption at rest protects stored data such as disks and databases, while encryption in transit protects data moving across networks using protocols like TLS. Most systems need both.
What is a customer-managed key?
It is an encryption key you create and control in a service like KMS, rather than one managed entirely by the provider. It gives more control over rotation, access and revocation.
What is mTLS?
Mutual TLS makes both client and server present certificates, so each side verifies the other. It is often used between services. This free intermediate Codelivly room covers it alongside standard TLS.