Home » Amazon » AWS Certified Solutions Architect - Associate » What does the "Server Side Encryption" option on Amazon S3 provide?
What does the "Server Side Encryption" option on Amazon S3 provide?
A. It provides an encrypted virtual disk in the Cloud
B. It doesn’t exist for Amazon S3, but only for Amazon EC2.
C. It encrypts the files that you send to Amazon S3, on the server side.
D. It allows to upload files using an SSL endpoint, for a secure transfer.
Correct Answer: C
Explanation/Reference:
Explanation:
Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3-managed encryption keys (SSE-S3) employs strong multi-factor encryption.
Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates. Amazon S3 server-side encryption uses one of the strongest block ciphers available, 256-bit Advanced Encryption Standard (AES-256), to encrypt your data.
Reference: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
