• Anytime you hear “encryption” for an AWS Service, its most likely KMS.
• KMS - AWS Manages the encryption key for us.
• Encryption Opt-In:

    - EBS Volume: Encrypt Volume
    - S3 Bucket: Server Side Encryption
    - Redshift Database: Encryption of Database
    - RDS Database: Encryption of Database
    - EFS: Encryption of FileSystem

Encryption is automatically enabled for : Cloud Trail Logs, S3 Glacier, Storage Gateway!