Ravi Sir's Cyber Security Cards › Revision Cards
Protecting Data: S3, Encryption and Secrets
Protecting Data: S3, Encryption and Secrets Keeping stored data safe in AWS: S3, encryption and secrets. S3 encrypts new objects by default (SSE-S3). SSE-KMS gives more control: you choose who may use the key, and every use is logged. Tick Encryption when creating RDS and EBS. An open S3 bucket is t
Read card text
What this card says
What it is
Keeping stored data safe in AWS: S3, encryption and secrets.
Encryption
S3 encrypts new objects by default (SSE-S3).
SSE-KMS gives more control: you choose who may use the key, and every use is logged.
Tick Encryption when creating RDS and EBS.
Why it matters for security
An open S3 bucket is the classic cloud leak.
Keep secrets in Secrets Manager, not in code or files.
Learn more in the lesson: 30.4 Protecting Data: S3, Encryption and Secrets