Ravi Sir's Cards › AWS
Opaque or auditable?
This comparison card contrasts Opaque or auditable. AWS-owned key is described as sSE with AWS-owned key. It also notes little CloudTrail on decrypt. Customer CMK is described as sSE-KMS CMK with grant and rotation.
Read card text
What this card says
Opaque or auditable?
AWS-owned key
SSE with AWS-owned key; little CloudTrail on decrypt.
Customer CMK
SSE-KMS CMK with grant and rotation.
Key points
Dev scratch tables.
Prod + compliance.
Example
SSE AWS owned.
Use when
Quick.
Prefer prod.