Storage Services

Question 1

What are are S3 Encyption Methods?

Answer 1

• Client-side: YOU do key management, YOU do encryption, NO extras
• SSE-C: YOU do key management, S3 does encryption, NO extras
• SSE-S3: S3 does key management, S3 does encryption, Extra is AES-256
• SSE-KMS: S3 & KMS does key management, S3 does encryption, Extra is Rotation Control & Role Seperation

Question 2

What are 3 types of Storage?

Answer 2

• Object (S3)
• Block (Elastic Block Store)
• File (Elastic File System, AWS Storage Gateway, Amazon FSx)