- Symmetric AES-256
- Single key to encrypt and decrypt
- AWS services mostly use Symmetric keys
- Access only through API calls
- Asymmetric RSA & ECC
- Public and Private Key
- Used for encryption and decryption or Sign/Verify operation
- Public key is downloadable, not the private key