The correct answers are:
A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3) ✅
B. Server-side encryption with AWS KMS managed keys (SSE-KMS) ✅
Reasoning:
SSE-S3 uses keys managed by Amazon S3 to encrypt your data at rest.
SSE-KMS integrates with AWS Key Management Service (KMS) for more control over encryption keys, including key rotation and access policies.
TLS and SSL are used for data in transit, not at rest.
Transparent Data Encryption (TDE) is used with databases like Amazon RDS for Oracle or SQL Server, not for S3 objects.
Confidence level: High
Reference: AWS S3 Encryption Documentation
A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
All Amazon S3 buckets have encryption configured by default, and all new objects that are uploaded to an S3 bucket are automatically encrypted at rest. Server-side encryption with Amazon S3 managed keys (SSE-S3) is the default encryption configuration for every bucket in Amazon S3.
E. Transparent Data Encryption (TDE) is a technology used to encrypt entire databases at rest, including data and log files, to protect against unauthorized access to sensitive data.
The encryption types that can be used to protect objects at rest in Amazon S3 are:
A. Server-side encryption with Amazon S3 managed encryption keys (SSE-S3)
B. Server-side encryption with AWS KMS managed keys (SSE-KMS)
These options provide encryption for data stored in Amazon S3. SSE-S3 and SSE-KMS encrypt data at the object level using encryption keys managed by Amazon S3 and AWS Key Management Service (KMS), respectively.
Amazon S3 now applies server-side encryption with Amazon S3 managed keys (SSE-S3) as the base level of encryption for every bucket in Amazon S3. Starting January 5, 2023, all new object uploads to Amazon S3 are automatically encrypted at no additional cost and with no impact on performance. T
Unless you specify otherwise, buckets use SSE-S3 by default to encrypt objects. However, you can choose to configure buckets to use server-side encryption with AWS Key Management Service (AWS KMS) keys (SSE-KMS) instead.
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingKMSEncryption.html
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
1507a4f
1 week, 2 days agoGustavo_Arg
1 month, 3 weeks agochalaka
10 months agoIonesia
1 year, 2 months agoSyedharoonhussain
1 year, 3 months agoasdfcdsxdfc
1 year, 3 months ago