Amazon S3 Server Side Encryption (SSE)

Amazon S3 announced a new encryption feature Server Side Encryption (SSE). Amazon S3 SSE provides you the ability to encrypt data stored at rest in Amazon S3. With Amazon S3 SSE, you can encrypt data on upload simply by adding an additional request header when writing the object to Amazon S3. Decryption happens automatically when data is retrieved.

Amazon S3 Server Side Encryption employs strong multi-factor encryption. Each object is encrypted with a unique key. As an additional safeguard, this key is itself encrypted with a regularly rotated master key. Amazon S3 Server Side Encryption uses one of the strongest block ciphers available — 256-bit Advanced Encryption Standard (AES-256) — to encrypt your data. For customers seeking to comply with certain regulations such as PCI and HIPAA, Amazon S3 Server Side Encryption may be used as part of an overall strategy to encrypt sensitive data for regulatory or compliance reasons.

You can start using Amazon S3 Server Side Encryption today using the AWS Management Console or the Amazon S3 API.

To use Amazon S3 SSE from the AWS Management Console:

1. Under the Amazon S3 tab, use the upload dialog to add files to be uploaded.

2. In the “Set Details” section of the upload dialog, set the “Use Server Side Encryption” checkbox property.

3. Start Upload. The files will be encrypted and stored in Amazon S3.

If you prefer to manage your own encryption keys, you can also make use of the client libraries for encryption provided by Amazon.

Amazon S3 Server Side Encryption has no additional charge for Amazon S3 customers.

Read More:

Server Side Encryption
Class AmazonS3EncryptionClient

A -> Attitude
S -> Skill
K -> Knowledge
Don’t criticize…. discovery best deal that can help you to resolve Issues! 😛