Re:Why Amazon S3 server side encryption (SSE-S3) is misleading
by tgv on Monday January 16, 2023 @01:57PM
(#34404168)
AFAIK, it only helps against hackers/insiders who steal the raw file. If you provide access to your bucket, it isn't doing anything. As always with Amazon (and other services, really): you really should understand the service. Just using one because you read "encryption" is unwise.
Re:Why Amazon S3 server side encryption (SSE-S3) is misleading
by limitedsupply on Monday January 16, 2023 @02:22PM
(#34404449)
Wouldn’t your example apply to any encrypted hard drive as well? If you provide access to it encryption is not doing anything.
Re:Why Amazon S3 server side encryption (SSE-S3) is misleading
by NathanKP on Monday January 16, 2023 @02:46PM
(#34404691)
It's all about layers of protection.
This layer of server side encryption is designed to protect against an attack where someone breaks into an AWS data center, pulls a disk drive out of a storage system that is hosting S3 objects, and then tries to read the data off of that disk drive. Without the key (which is obviously stored separately, on a separate system) the disk will be useless to them.
AWS will now encrypt all new data in its Amazon S3 storage service by default. Huge announcement, secure default for the win, sure, but it gives a false sense of security.