Deliverables

Submit screenshot of your S3 bucket with a file stored in it.

Submit screenshot of your KMS key listed in the console

Screenshot showing properties of a file in your S3 bucket that is encrypted with S3 Master Key

Screenshot showing properties of a file in your S3 bucket that is encrypted with your AWS KMS key

Steps

Create bucket using S3 Server Side Encryption

Upload a small file as a test

Create a Customer Managed Key in KMS

Use native S3 SSE (S3 Master Key) to protect a file in S3 Bucket

Click Upload to add a file to your S3 Bucket

• Expand Properties
• Select "Specify and encryption key"
• Override bucket settings
• Select SSE-S3 (this uses AWS's managed key)

Use native AWS KMS SSE (KMS Master Key) to protect a file in S3 Bucket