A somewhat curated list of links to various topics in application security.


CMKs Stored in AWS KMS (SSE-KMS), Amazon S3-managed encryption keys (SSE-S3), customer-provided encryption keys (SSE-C)Amazon S3 manages encryption keys for you, the data upload and retrieval is fully transparent, the file is encrypted automaticaly before saving to S3 and decrypted automatically when you request it.