S3 Encryption Support

Question

What security encryption is support for S3?

Accepted Answer

You can set S3 default encryption which ensures all new objects are encrypted when stored in the bucket. Objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer managed keys (CMKs) which are stored in the AWS Key Management Service (AWS KMS).

For more information regarding how to set the default S3 Encryption, please review the following documentation:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-encryption.html

Answer

S3 ensures data protection for data in transit by using Secure Socket Layer/Transport Layer Security (SSL/TLS) or client-side encryption.

For protecting data at rest in Amazon S3, it provides flexibility to use one of the following options:

1. Server-side encryption
2. Client side encryption

Please refer [Protecting data with encryption](https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html) for reference.

Hope it helps.

Abhishek

S3 Encryption Support

Relevant content