- Home
- All questions
- Question 146
AWS Certified Solutions Architect study material · question 146 of 500
Why does AWS recommend keeping SSE-C disabled unless a workload specifically requires it?
Show the answer
Answer: C. The key must accompany every request, so managed services cannot decrypt the objects
Supplying the key on every read and write makes sharing with other principals or AWS services impractical, so SSE-S3 or SSE-KMS usually fits better.
Source: Security best practices for Amazon S3 (Amazon Web Services) — Keep SSE-C disabled unless required