AWS Key Management Service (KMS) makes it easy to create and control encryption keys, which could be used to meet encryption and deletion requirements like those associated with GDPR. Cryptographic deletion is the idea is that you can delete a relatively small number of keys to make a large amount of encrypted data irretrievable. Hear from Ken, general manager of AWS KMS, about best practices related to encryption, key management and cryptographic deletion.
https://aws.amazon.com/kms/
https://aws.amazon.com/compliance/gdpr-center/
AWS Podcast