Section 12: Amazon S3 Introduction

Question 1

Example: s3://my-bucket/my-folder/myfile.txt

-Explain what is the “key”,”prefix” and “object”

Answer 1

• The “key” is the full path -> “my-folder/myfile.txt”
• Prefix -> “my-folder/”
• Object -> “myfile.txt”

Question 2

What is SSE-S3 encryption for S3 bucket.

Answer 2

• It is encryption and the keys is handled and manage by AmazonS3.
• Encrypted on server side
• AES-256 is used for encryption
• Must set header “x-amz-server-side-encryption”:”AES256”

Question 3

What is SSE-KMS encryption for S3 bucket.

Answer 3

• Encryption using keys which is handled and manage by KMS
• KMS Advantages: user control + audit trail
• Object is encrypted server side
• Must set header: “x-amz-server-side-encryption”:”aws:kms”

Question 4

What is SSE-C encryption for S3 bucket.

Answer 4

• Encryption using data keys which is managed by the customer
• Server side encryption
• Amzons does not store the encryption keys
• HTTPS must be used
• Encryption key must be provided in EVERY HTTP header