Difference between revisions of "AWS S3 encryption"

Latest revision as of 13:05, 12 June 2024

Encryption (2017) is supported in AWS S3 (default Advanced Encryption Standard (AES 256bit) since January 5, 2023 all new objects are encrypted by default ^[1].

In transit (SSL/TLS)
At rest:
- Server Side Encryption (SSE):
- S3 Managed Keys (SSE-S3; 256bit);
- AWS Key Management Service, Managed Keys (SSE-KMS)
- Server Side Encryption with Customer Provided Keys (SSE-C)
Client Side Encryption: user encrypts data and use AWS S3 to store it

@@ Line 1: / Line 1: @@
+[[AWS S3 encryption|Encryption]] (2017) is supported in AWS S3 (default [[Advanced Encryption Standard]] (AES 256bit) since January 5, 2023 all new objects are encrypted by default <ref>https://docs.aws.amazon.com/AmazonS3/latest/userguide/default-encryption-faq.html</ref>.
+*In [[transit]] ([[SSL]]/[[TLS]])
+*At [[rest]]:
+** [[Server Side Encryption]] (SSE):
+** [[S3 Managed Keys]] (SSE-S3; 256bit);
+** [[AWS Key Management Service]], Managed Keys (SSE-KMS)
+** Server Side Encryption with Customer Provided Keys (SSE-C)
+* [[Client Side Encryption]]: user encrypts data and use AWS S3 to store it
+== Related ==
+* <code>[[aws s3api get-bucket-encryption]]</code> command
+* [[Terraform S3 resources]]: <code>[[aws_s3_bucket_server_side_encryption_configuration]]</code>
+* [[AWS S3 encryption]]
+== See also ==
+* {{S3}}
+[[Category:AWS]]
-* [[aws s3api get-bucket-encryption]]
-{{S3}}