Ravi Sir's Cards › AWS
Is SSE-S3 enough for this Deny?
This interview card answers: Is SSE-S3 enough for this Deny? No — AES256 is not aws:kms; the Deny rejects it if you require KMS. Choose intentionally per compliance. --sse AES256 , then AccessDenied when KMS required.
Read card text
What this card says
What it is
No — AES256 is not aws:kms; the Deny rejects it if you require KMS.
AES256
Why it matters
Choose intentionally per compliance.
How / example
--sse AES256 → AccessDenied when KMS required.