An ETL process retrieves customer data from an internal API.
Prevent plaintext on the network and verify the server identity.
Which protection approach is most appropriate?
Use TLS with certificate validation and secure protocol settings for internal as well as external traffic.
Detailed explanation
Audit events do not protect application traffic.
Audit events do not protect application traffic.
An internal network can still be observed after compromise.
An internal network can still be observed after compromise.
TLS provides encrypted transport and authenticates the endpoint.
TLS provides encrypted transport and authenticates the endpoint.
Lifecycle manages objects, not network connections.
Lifecycle manages objects, not network connections.
Check official documentation
Compare the following points with the official documentation.
AWS services TLS encryption in transit、ACM certificates、load balancer HTTPSの公式説明を確認する。
What to confirm
VPC内HTTPとTLSによる転送保護の違いを説明できる。
Key points
- TLS
- HTTPS
- Certificate
- Encryption in transit
Notes
- Environment: AWS公式DEA-C01試験ガイドと各サービスの公式ドキュメントの確認
- Confirm current AWS service behavior in the official DEA-C01 documentation.
Foundation review
At rest versus transit
SSE-KMS protects stored data while TLS protects network transfer.
Certificate operations
Renewal, hostname validation, trust stores, and revocation need monitoring.