Study. uk . com
  1. Home
  2. All questions
  3. Question 146

AWS Certified Solutions Architect study material · question 146 of 500

Why does AWS recommend keeping SSE-C disabled unless a workload specifically requires it?

  1. SSE-C prevents lifecycle transitions from running
  2. SSE-C doubles the storage charge for each object
  3. The key must accompany every request, so managed services cannot decrypt the objects
  4. SSE-C objects cannot be versioned
Show the answer

Answer: C. The key must accompany every request, so managed services cannot decrypt the objects

Supplying the key on every read and write makes sharing with other principals or AWS services impractical, so SSE-S3 or SSE-KMS usually fits better.

Source: Security best practices for Amazon S3 (Amazon Web Services) — Keep SSE-C disabled unless required

Challenge yourself on this topic → Study as cards