AWS

AWS KMS

How AWS KMS actually protects data: envelope encryption, key policies vs. IAM, and why you can never touch a key in plaintext.

aws · kms · encryption

Amazon S3 Encryption

Every S3 encryption option explained — SSE-S3, SSE-C, SSE-KMS — plus the bucket-keys optimization that quietly changes what shows up in your CloudTrail logs.

aws · s3 · encryption