AWS-S3-Security-and-Encryption

AWS-S3-Security-and-Encryption.txt

S3 Security and Encryption Overview
Security
  - By default, all newly created buckets are PRIVATE
  - Access control is done with Bucket Policies (entire bucket) or Access Control Lists (specific object)
  - Can log all access requests to S3 Bucket

Encryption
In Transit - sending information to and from bucket via SSL/TLS (https)
At Rest - four types of encryption: SSE-S3, SSE-KMS, SSE-C, and Client Side Encryption
  - Server Side Encryption
    - SSE-S3 - S3 Manged Keys
    - SSE-KMS - AWS Key Mangement Service, managed key - provides audit trails
    - SSE-C - Servier Side Encryption with customper provided keys, key is managed by client
  - Client Side Encryption