AWS Certified Data Analytics Specialty 2021 – Hands-On - S3 Encryption (Reminder)

The video tutorial explains four methods of encrypting objects in Amazon S3: SSCS3, SSE-KMS, SSE-C, and client-side encryption. Each method is detailed, highlighting how they manage encryption keys and the scenarios they are best suited for. The tutorial also covers encryption in transit, emphasizing the importance of using HTTPS for secure data transfer.

Which of the following is NOT a method of encryption provided by Amazon S3?

• SSE-SSL

• SSE-C

• SSE-KMS

• SSE-S3

What type of encryption does SSE-S3 use?

• RSA 2048

• DES

• Blowfish

• AES 256

What is a key advantage of using SSE-KMS over SSE-S3?

• Control over access to encryption keys

• Lower cost

• Automatic key rotation

• Faster data retrieval

In SSE-C, who is responsible for managing the encryption keys?

• Amazon S3

• The client

• A third-party service

• AWS Key Management Service

Which encryption method requires the client to provide the encryption key with each request?

• SSE-S3

• SSE-KMS

• Client-side encryption

• SSE-C

What must clients do when using client-side encryption?

• Encrypt data after uploading to S3

• Rely on Amazon S3 for encryption

• Encrypt data before uploading to S3

• Use AWS-managed keys

What is the purpose of using HTTPS in the context of Amazon S3?

• To reduce data storage costs

• To speed up data transfer

• To provide encryption in transit

• To enable server-side encryption