Study. uk . com
  1. Home
  2. All questions
  3. Question 149

AWS Certified Solutions Architect study material · question 149 of 500

Which encryption does S3 apply to objects under SSE-S3?

  1. 128-bit AES in CBC mode, with one key per bucket
  2. RSA-2048, with the key held in ACM
  3. ChaCha20-Poly1305, with a key supplied per request
  4. 256-bit AES in Galois/Counter Mode, with each object given its own key
Show the answer

Answer: D. 256-bit AES in Galois/Counter Mode, with each object given its own key

S3 encrypts each object with a unique key and then encrypts that key with another it rotates regularly, using 256-bit AES-GCM.

Source: Using server-side encryption with Amazon S3 managed keys (S… (Amazon Web Services) — Using server-side encryption with Amazon S3 managed keys (SSE-S3)

Challenge yourself on this topic → Study as cards