The Plain Bucket
Learn to secure S3 data at rest by finding unencrypted buckets, fixing them, and building securely.
medium
To access material, start machines and answer questions login.
Access controls decide who can request your data. Encryption at provides extra protection in case credentials are compromised, permissions drift, or storage is exposed.
By default, encrypts all objects with , even if the bucket has no explicit bucket-level encryption. However, when dealing with compliance, you can use a customer-managed key, a separate decryption authorization, or a -backed key usage audit.
In this room, you will see how to add an extra layer of security for data at rest.
Learning Objectives
- Understand the difference between SSE-S3, , and
- How to identify what encryption type is applied to an S3 bucket
- Enable default SSE-KMS on a bucket
- Enforce SSE-KMS operations
Prerequisites
- Being able to set up your environment (First Steps Into AWS room)
- Basic commands (Linux Fundamentals room)
- Have a basic understanding of the S3 service (Introduction to Cloud Storage room)
Encryption is everywhere.
Ready to learn Cyber Security?
The The Plain Bucket room is only available for Premium or Max subscribers. Signup now to access more than 500 free rooms and learn cyber security through a fun, interactive learning environment.
Already have an account? Log in