Learning AWS - Second Edition

Using the S3 console for server-side encryption

The easiest way to secure data on S3 is via the S3 console.

As we don't have any S3 buckets in our sample application, we will create the bucket and configure it to store data in encrypted form:

1. In the Amazon S3 console, click on the Create bucket button:

2. In the Create bucket pop-up window, specify a name for the bucket and the region. Click on the Next button:

.

3. Select the AWS-KMS option for server-side encryption using AWS KMS Manager:

4. Next, specify the permissions on the bucket. Here, ...