AWS Strengthens Security with Default Encryption on S3, Is Your Data Fully Protected?

Originally published by Dig Security. Written by Sharon Farber. Executive summary As with any change to security policy, it’s important to consider it in the context of the shared security model. The ultimate responsibility for protecting sensitive data rests on the customer, rather than the cloud provider. Since January 2023, AWS has enabled encryption by default on Amazon S3. In recent weeks, we saw this change rolled out to many existing buckets. Encryption on the bucket level does not mea...

aws change cloud cloud provider context customer data default dig dig security encryption executive important policy protecting responsibility security security policy sensitive data shared security written