Section 14: S3 Security Flashcards
1
Q
SSE-S3 encryption type
A
AES-256
2
Q
Advantage of using SSE-KMS
A
user control
audit key usage using cloudtrail
3
Q
SSE-KMS limitation
A
KMS limits such as quota for decrypt KMS api calls
4
Q
HTTPS must be used with this type of S3 encryption
A
SSE-C
5
Q
This type of encryption uses keys managed outside of AWS by the customer
A
SSE-C
6
Q
In CORS(Cross-Origin Resource Sharing) what parts make up the origin?
A
Scheme(protocol)
Host(domain)
Port
7
Q
This is web browser security that allows you to enable objects being retrieved from one S3 bucket if request is coming from another origin
A
CORS