# DynamoDB Encryption

## DynamoDB Encryption Client

* It is a **software library that helps you to protect your table data before you send it to DynamoDB**.\\

* It **encrypts the attribute values in each table item using a unique encryption key**.\\

* It then **signs the item to protect it against unauthorized changes, such as adding or deleting attributes or swapping encrypted values**.\\

* After you create and configure the required components, the DynamoDB Encryption Client **transparently encrypts and signs your table items when you add them to a table**.\\

* It also **verifies and decrypts them when you retrieve them**.

## DynamoDB Encryption at Rest <a href="#encryptionatrest" id="encryptionatrest"></a>

* **All user data stored in DynamoDB is fully encrypted at rest**.\\

* DynamoDB encryption at rest provides enhanced security by **encrypting all your data at rest using encryption keys stored in KMS**.\\

* This functionality helps **reduce the operational burden and complexity involved in protecting sensitive data**.
