Flashcards
2-5 S3 encryption
Cards in this deck (15)
- 1How data in transit is encrypted in S3 connection?SSL/TLS or client-side encryption
- 2Wat kind of encryption is availble for data at rest in S3?Server-side encryption
Client-side encryt - 3What is server-side encryption?Request Amazon S3 to encrypt your object before saving it on disks in its data centers and then decrypt it when you download the objects.
- 4What is client-side encryption?Encrypt data client-side and upload the encrypted data to Amazon S3. In this case, you manage the encryption process, the encryption keys, and related tools.
- 5Explain SSE-S3 encryption.Each object is encrypted with a unique key
Object is encrypted additionally with master key that is regularly rotated - 6Which kind of encryption technique is used in SSE-S3?AES 256-bit
- 7What should we use if we need to encrypt all objects in a bucket?Bucket policy
- 8What should be icnluded in bucket policy that requires a upload to a bucket?x-amz-server-side encryption
- 9Explain SSE-KMS in short.We create KMS keys and they are called customer managed keys.
Then we store them ins AWS Key management service. KMS needss separate permission to be accessed - 10How use of KMS keys can be monitored?Cloud Trail
- 11What are KMS limitations?There is KMS quota for each region
- 12Explain SSE-C encryptionWith the encryption key that you provide as part of your request, Amazon S3 manages data encryption as it writes to disks and data decryption when you access your objects.
The only thing that you need to do is manage the encryption keys that you provide. - 13What is stored in S3 during SSE-C encryption to validate future requests?salted HMAC value
- 14Which protocol is required for SSE-C?HTTPS
- 15What are two options of client-side encryption?Use a key stored in AWS Key Management Service (AWS KMS).
Use a key that you store within your application.
Information
- Description
- Easy AWS Solution Associate - combined (Whizlabs+Maarek+in28+documentation) Flashcards on 2-5 S3 encryption, created by Archimed Nemes on 18/01/2023.
- Created by
- Archimed Nemes · Jan 2023
- Updated
- Jan 18, 2023
- Views
- 0
- Rating