This content is open to everyone — sign in to save your progress, earn points, and unlock module exams.
Topic 4.2 of Data Protection for Cloud Infrastructure
Certificate trust hierarchy, PKI operations, cloud-native PKI services, key lifecycle, and KMS vs HSM.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
External links
AWS Certificate Manager Developer Guide
Complete AWS ACM guide covering certificate issuance, auto-renewal, and integration with services.
AWS Certificate Manager Developer Guide
Complete AWS ACM guide covering certificate issuance, auto-renewal, and integration with services.
NIST SP 800-57: Recommendation for Key Management
The definitive NIST guidance on cryptographic key management including lifecycle, algorithms, and length.
NIST SP 800-57: Recommendation for Key Management
The definitive NIST guidance on cryptographic key management including lifecycle, algorithms, and length.
AWS CloudHSM Documentation
AWS CloudHSM setup, usage, and FIPS 140-2 Level 3 compliance documentation.
AWS CloudHSM Documentation
AWS CloudHSM setup, usage, and FIPS 140-2 Level 3 compliance documentation.
Let Encrypt — Certificate Authority Overview
How Let Encrypt issues and renews free TLS certificates using the ACME protocol.
Let Encrypt — Certificate Authority Overview
How Let Encrypt issues and renews free TLS certificates using the ACME protocol.
Quadrant 4 · Self-Assessment
Data Protection in the Cloud
Envelope encryption, AES modes, post-quantum cryptography, tokenisation, PKI, key management models, and IAM.
Cloud Security: Complete Assessment
Comprehensive 120-question assessment covering all six chapters of the Cloud Security eBook 2026.
