Skip to content

S3 Encryption Exam Tips

  • Encryption In-Transit
    • SSL/TLS (HTTPS)
  • Encryption At Rest
    • Server-Side Encryption
      • SSE-S3
      • SSE-KMS
      • SSE-C (Customer-Managed)
    • Client-Side Encryption
  • If you want to enforce the use of encryption for your files stored in S3, use an S3 Bucket Policy to deny all PUT requests that don't include the x-amz-server-side-encryption parameter in the request header.