2 years ago

Category: encryption, Security

S3 Encryption is a way to secure S3 buckets, this can be encryption while the data is at rest, as well as when the data is in transit. Bucket Policies’ have different types available to use; these control who and what can access the S3 bucket. It is recommended to use Bucket Policies instead of Bucket ACLs, as Bucket Policies are more flexible.

Bucket policies can be a resource based or identity based policies: Bucket ACLs are a way to control access to the S3 Bucket, but is depreciated in favor of Bucket Policies. Access Control List (ACL) for the bucket itself can be set; this is where public access can be granted (and acknowledgement of permission made).