AWS Encryption SDK Developer Guide

The AWS Encryption SDK is an encryption library that helps make it easier for you to implement encryption best practices in your application. It enables you to focus on the core functionality of your application, rather than on how to best encrypt and decrypt your data.
The AWS Encryption SDK answers questions like the following for you:

Which encryption algorithm should I use?

How, or in which mode, should I use that algorithm?

How do I generate the encryption key?

How do I protect the encryption key, and where should I store it?

How can I make my encrypted data portable?

How do I ensure that the intended recipient can read my encrypted data?

How can I ensure my encrypted data is not modified between the time it is written and when it is read?