AWS

2 notes

• Amazon S3 Encryption

  Every S3 encryption option explained — SSE-S3, SSE-C, SSE-KMS — plus the bucket-keys optimization that quietly changes what shows up in your CloudTrail logs.

  aws · s3 · encryptionUpdated Sep 17, 2026

• AWS KMS

  How AWS KMS actually protects data: envelope encryption, key policies vs. IAM, and why you can never touch a key in plaintext.

  aws · kms · encryptionUpdated Sep 17, 2026