Security & DevSecOps Practical By Samson Tanimawo, PhD Published Feb 1, 2026 4 min read

Encryption at Rest Everywhere

Default encryption. The patterns and verification.

Default-on

Account-level setting. New resources inherit.

S3, EBS, RDS all support.

Verify

Config rules per resource type.

Non-compliant flagged.

KMS

Customer-managed keys for sensitive data.

Audit log on every use.