Wherever confidential data is stored, it must be protected against unauthorized access. When users travel, their organization's confidential data goes with them. See BitLocker for a general overview and list of articles. For more information, seeĪssessing your storage activity and usage with S3 Storage Lens.This article explains how BitLocker Device Encryption can help protect data on devices running Windows.

Visibility into object-storage usage and activity. S3 Storage Lens is a cloud-storage analytics feature that you can use to gain organization-wide To see which percentage of your storage bytes are encrypted, you can use Amazon S3 Storage Lens To configure client-side encryption, see Protecting data by using client-side In this case, you manage theĮncryption process, encryption keys, and related tools. (SSE-S3), or Specifying server-side encryption withĬlient-side encryption – You encrypt your dataĬlient-side and upload the encrypted data to Amazon S3. (SSE-KMS), Specifying Amazon S3 encryption with S3 managed keys To configure server-side encryption, see Specifying server-side encryption with AWS KMS (AWS KMS) keys (SSE-KMS) or customer-provided keys (SSE-C) in your S3 PUT requests or set the default encryption configuration in the destination bucket to use SSE-KMS to encrypt your data. If you want to use a different type of default encryption, you can also specify server-side encryption with AWS Key Management Service Is the base level of encryption configuration for every bucket in Amazon S3. Server-side encryption with Amazon S3 managed keys (SSE-S3) Server-side encryption – Amazon S3 encrypts your objectsīefore saving them on disks in AWS data centers and then decrypts the objects whenĪll Amazon S3 buckets have encryption configured by default and all new objects uploaded to an S3 bucket are automatically encrypted at rest.

External storage encryption