S3 - Security & Encryption

• By default, all newly created buckets are private.
• You can setup access control to you buckets by using:
• Bucket policies.
• Access Control Lists.
• S3 buckets can be configured to create access logs which log all the requests made to the S3 bucket. This can be done to another bucket.
• In Transit Encryption:
• SSL/TLS
• At Rest Encryption:
• Server Side Encryption:
• SSE-S3: S3 Managed Keys
• SSE-KMS: AWS Key Management Service, managed keys.
• SSE-C: With Customer provided keys.
• Client Side Encryption.