SSE KMS

SSE-KMS¶

• leverage AWS KMS (Key Management Service) to mange [[encryption key]]s
• KMS Advantages: user control + audit trail
• Object is encrypted [[server side]]
• Must set header "x-amz-server-side-encryption": "aws:kms"