How can you encrypt data at rest in S3?
Options:
SSE-S3 → Managed by S3.
SSE-KMS → AWS KMS keys for more control.
SSE-C → Customer-provided keys.
Client-side encryption → Encrypt before upload.
Example: Company uses SSE-KMS for audit and key rotation.
SSE-S3 → Managed by S3.
SSE-KMS → AWS KMS keys for more control.
SSE-C → Customer-provided keys.
Client-side encryption → Encrypt before upload.
Example: Company uses SSE-KMS for audit and key rotation.
