How can I use AWS Lambda for data encryption?

How can I use AWS Lambda for data encryption?

You can use AWS Lambda to encrypt data by integrating it with AWS Key Management Service (KMS). This allows you to encrypt and decrypt data programmatically.

Can you provide a sample code for encrypting data using Lambda?

Sure! Here's a simple example in Python:

import boto3

def lambda_handler(event, context):
    kms_client = boto3.client('kms')
    plaintext = event['data']
    response = kms_client.encrypt(
        KeyId='your-kms-key-id',
        Plaintext=plaintext
    )
    return response['CiphertextBlob']

What are the costs associated with using AWS Lambda for this?

AWS Lambda pricing is based on the number of requests and the duration of your code execution. Data encryption with KMS also incurs costs based on the number of requests and the amount of data processed.

Are there any security best practices I should follow?

Yes, ensure that you use IAM roles with the least privilege, rotate your KMS keys regularly, and monitor access logs for any unauthorized access.