From the course: AWS Administration: Security Operations

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

S3 Encryption

S3 Encryption - Amazon Web Services (AWS) Tutorial

From the course: AWS Administration: Security Operations

Start my 1-month free trial

S3 Encryption

“

- [Narrator] For the encryption of data records, stored in S3 buckets, we can protect the data in transit we're connecting with SSL endpoints or VPC endpoints. SSL endpoints, obviously, across the internet. VPC endpoints, totally private. Our traffic flow on the Amazon private network. For protection of the data records at rest, we have the choices of server-side or client-side encryption. The data encrypted at the object level, is going to be using AES 256-bit encryption. For S3 access, we can control that access with ACLs Access Control Lists, bucket policies, which are resource policies to finding what users can actually access the bucket contents, or specific IAM policies, which were assigned to the users. For Server-Side Encryption, abbreviated SSE-S3, server-side encryption with S3 is using managed keys. Each object is encrypted with a unique data key, which in-turn is encrypted with the customer master key. We can also…

Contents