Encrypting S3 Data with SSE-KMS – CLI

Learn about the fundamentals of encrypting S3 objects with the Key Management Service (KMS). This lab teaches how to use the AWS CLI to create a customer managed KMS key, and then enable SSE-KMS for an S3 bucket using that KMS key. It also teaches how to enable a Bucket Key to reduce costs when using SSE-KMS, and how to verify that objects being uploaded are being encrypted with SSE-KMS.