# Encryption at Rest and in Transit

> Master data protection by implementing robust encryption for data at rest (KMS, CMKs) and in transit (TLS/mTLS) across multi-cloud environments.

Canonical: https://codelivly.com/rooms/encryption-at-rest-and-in-transit
Last updated: 2026-09-24

| | |
|---|---|
| Level | Intermediate |
| Category | Cloud Security |
| Lessons | 3 |
| Estimated time | 30 min |
| XP | 100 |

This intermediate module explores the critical discipline of data protection in the cloud. You will learn the mechanics of encryption at rest using Key Management Services (KMS) and Customer-Managed Keys (CMKs), and encryption in transit using TLS and mutual TLS (mTLS). The curriculum covers envelope encryption, automated key rotation, certificate management, and how to enforce encryption mandates via cloud-native guardrails (like AWS S3 bucket policies or Azure Storage Account requirements). By mastering these concepts, you will ensure that sensitive data remains cryptographically secure against unauthorized access, both while stored and while moving across networks.

## Lessons

1. What Is Cloud Encryption and Why Does It Matter (30 min)
2. KMS & Managed Encryption Keys (30 min)
3. Guided Lab: Enforcing Encryption Across a Cloud Environment (30 min)

## Related

- [Learning path: Cloud Infrastructure and Storage Security](https://codelivly.com/learning-paths/cloud-infrastructure-and-storage-security)
- [All rooms](https://codelivly.com/rooms)