AWS Certified Data Analytics Specialty 2021 – Hands-On - S3 Encryption – Hands-On

The video tutorial covers various encryption methods for Amazon S3 buckets, including server-side encryption with S3 managed keys and KMS keys, as well as client-side encryption. It explains how to enable versioning, upload objects with different encryption settings, and apply default encryption to all objects in a bucket. The tutorial also highlights the differences between server-side and client-side encryption, providing a comprehensive overview of encryption options in AWS S3.

What is the initial state of the uploaded file 'coffee.jpg' in terms of encryption?

• Encrypted with client-side encryption

• Encrypted with SSE-S3

• Encrypted with SSE-KMS

• Unencrypted

Which encryption method uses Amazon S3's own key to encrypt objects?

• SSE-S3

• Client-side encryption

• SSE-KMS

• None of the above

What additional step is required when using SSE-KMS for encryption?

• None of the above

• Enabling versioning

• Selecting a KMS key

• Using AWS CLI

Which encryption method requires the use of a key ARN?

• None of the above

• Client-side encryption

• SSE-KMS

• SSE-S3

How can you ensure all objects in a bucket are encrypted by default?

• Use client-side encryption

• Use AWS CLI for uploads

• Manually encrypt each object

• Enable default encryption in bucket properties

What is a limitation of using SSE-C encryption?

• It can only encrypt text files

• It can only be used with AWS CLI, SDK, or REST API

• It is not supported by AWS

• It requires a paid subscription

What distinguishes client-side encryption from server-side encryption?

• It is applied before uploading to S3

• It is only for text files

• It is managed by AWS

• It is more secure