Amazon Textract server side encryption

0

When we are talking about encryption in Amazon Textract, there are following questions:

  1. Who chooses which encryption method is selected?
  2. If no method is selected, is there any encryption in the Amazon S3 storage?

Source: https://docs.aws.amazon.com/textract/latest/dg/encryption.html

Thanks

1 réponse
0

Hi,

In general, customer (security team, engineer team) should choose which encryption method to use according to their requests. AWS provides multiple exclusive options, and recommend to ensure your service encrypt at rest, encrypt at transit.

For S3, by default, the encryption is disabled. You can enable it by choosing either Amazon S3-Managed Keys (SSE-S3) or AWS Key Management Service (SSE-KMS). In summary, the former option use the key managed by AWS, which reduce the overhead to configure KMS key. The latter you have the flexibility to create and manage your KMS key.

More details: https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html https://docs.aws.amazon.com/kms/latest/developerguide/services-s3.html

Thanks,

AWS
Jady
répondu il y a un an

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions