AWS study guides

Understand service choices and troubleshoot permissions, then practise related certification topics.

• AWS KMS vs CloudHSM: Which key management option fits?

  Compare AWS KMS and AWS CloudHSM by service integration, cryptographic control, and operating responsibility. Includes the KMS custom key store option.

• How cross-account access to an Amazon S3 bucket works

  Understand the two-sided permission checks for cross-account Amazon S3 access, when to use a bucket policy or role, and how object ownership affects access.

• Troubleshoot Amazon S3 AccessDenied errors with SSE-KMS

  Trace S3 AccessDenied errors for SSE-KMS objects by separating S3 authorization from KMS key authorization and checking the operation-specific permissions.