Question

A company stores sensitive customer data in Amazon S3 buckets. The security team needs to ensure that all data is encrypted at rest. According to the AWS shared responsibility model, which statement correctly describes the encryption responsibilities?

Accepted Answer

AWS is responsible for encrypting the physical storage devices, while the customer is responsible for enabling encryption on S3 objects

Answer

AWS is responsible for all encryption requirements including S3 object encryption since it is a managed service

Answer

The customer is responsible for encrypting both the physical storage devices and the S3 objects

Answer

AWS is responsible for enabling S3 default encryption, while the customer manages only the encryption keys