Protecting your data in Amazon S3
summary
Overview of concrete S3 protections and tradeoffs: explains envelope encryption with AWS KMS and how S3 issues per-object data keys, introduces S3 Bucket Keys which replace many per-request KMS calls and can cut KMS request costs by up to 99%, shows how to enable default encryption per bucket (S3-managed or KMS keys) and lists four caveats for bucket keys, and documents recoverability features including object lock, versioning and cross-account or cross-region replication.
AI-written summary · about
chapters (11)
- 0:00Introduction to S3 data protection
- 1:04S3 encryption overview
- 3:36Encryption key management options
- 5:43Default bucket encryption
- 6:51Envelope encryption explained
- 9:41S3 bucket keys feature
- 12:07Data protection with versioning
- 14:17S3 replication for security
- 15:41Object lock for immutability
- 17:06Key takeaways summary
- 18:30Q&A session
related talks
45mAmazon S3 encryption and access control best practices
27mEncrypting 6 Petabytes of Customer Data with AWS KMS
51mUsing Key Management Service for data protection
58mUsing AWS data protection services for innovation and automation
18mImproving your Amazon S3 security with cost-effective practices
01h 03m3 innovations that redefine data protection for Amazon S3
01h 07mIntroduction to cryptography
50mImprove data control for customers with AWS KMS