{"id":"dynamodb-encryption-defense-in-depth-with-zero-cost-baseline","text":"DynamoDB encryption provides defense-in-depth with a zero-cost baseline: AWS owned keys are free with no KMS quota impact, customer-managed keys add audit trails via encryption context (table name + account ID), and KMS key caching with 5-minute refresh limits operational overhead.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"dynamodb-encryption-defense-in-depth-with-zero-cost-baseline","truth_value":"IN","reason":"premise"}]}}