Ravi Sir's Cards › AWS
Which header enforces KMS?
This interview card answers: Which header enforces KMS? S3 — x-amz-server-side-encryption must equal aws:kms (optional key-id condition). Deny StringNotEquals that value on PutObject. Aws s3 cp without --sse fails.
Read card text
What this card says
What it is
s3:x-amz-server-side-encryption must equal aws:kms (optional key-id condition).
x-amz-server-side-encryption
Why it matters
Deny StringNotEquals that value on PutObject.
How / example
aws s3 cp without --sse fails.