All you need to know about encrypting S3 buckets
Dance like nobody’s watching, encrypt like everyone is. Are you encrypting your data stored on Amazon Simple Storage Service (S3)? No, this video explains why and how to do so. Yes, this video helps you to avoid common pitfalls when doing so.
Looking for a new challenge?
After watching the video, you will be able to answer the following questions:
- How to enable default encryption for S3 buckets?
- Which encryption options fit my needs? SSE-S3, SSE-KMS with AWS managed CMK, or SSE-KMS with Customer managed CMK.
- How to make sure no one can lever out the default encryption?
- How does turning on encryption for S3 lead to extensive costs, and what can I do about it?
The following snippet contains the CloudFormation template used in the video to create a bucket, a bucket policy, as well as key.