Encryption Options for Amazon S3
AWS offers its customers the ability to encrypt the data that is hosted on its platform. There are two kinds of encryption technologies:
- Encryption in transit, which makes use of Secure Sockets Layer/Transport Layer Security (SSL/TLS), which is a cryptographic protocol that protects internet communications
- Encryption at rest, which ensures that data is encrypted as it is committed to disk for long-term storage
With encryption at rest, AWS offers various options to encrypt your data as it is stored in your S3 buckets. These are discussed next:
- Server-side encryption involves encrypting your data before saving it to disk and decrypting it as you access it from disk. AWS handles all the encryption and decryption processes for you, and here, four key options are available:
- Server-side encryption with Amazon S3 managed keys (SSE-S3): This is the default option for object-level encryption. AWS has also enforced this encryption method...