What does the “Server Side Encryption” option on Amazon S3 provide?
A.
It provides an encrypted virtual disk in the Cloud.
B.
It doesn’t exist for Amazon S3, but only for Amazon EC2.
C.
It encrypts the files that you send to Amazon S3, on the server side.
D.
It allows to upload files using an SSL endpoint, for a secure transfer.
C
1
0
It’s ‘C’.
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3-managed encryption keys (SSE-S3) employs strong multi-factor encryption.
Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates. Amazon S3 server-side encryption uses one of the strongest block ciphers available, 256-bit Advanced Encryption Standard (AES-256), to encrypt your data.
1
0
I agree with GFY
0
0
C.
0
0
A
0
5
Why A ? why not C ?
0
0
“It provides an encrypted virtual disk in the Cloud.”
Since S3 is an object store service and not a “virtual disk”, ‘A’ cannot be the correct answer.
0
0
its C
0
0
Answer : C
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
Amazon S3 supports bucket policies that you can use if you require server-side encryption for all objects that are stored in your bucket
1
0
C
0
0
C
0
0
It’s ‘C’.
https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
Server-side encryption is about protecting data at rest. Server-side encryption with Amazon S3-managed encryption keys (SSE-S3) employs strong multi-factor encryption.
Amazon S3 encrypts each object with a unique key. As an additional safeguard, it encrypts the key itself with a master key that it regularly rotates. Amazon S3 server-side encryption uses one of the strongest block ciphers available, 256-bit Advanced Encryption Standard (AES-256), to encrypt your data.
2
0
C = It encrypts the files that you send to Amazon S3, on the server side.
Server-side encryption encrypts only the object data. Any object metadata is not encrypted.
0
0