-
Hi Alexander,
For SSE-S3, it only encrypts the object data, not object metadata. So you might have to update the “Metadata Encryption” in your list. More information here:
https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html
In my opinion, as long as you know the basic difference between these three options, you’re good to go. Another important thing to know is the difference of different types of CMKs in the AWS KMS.
You can check out the flashcards that I added in the course for the complete information.
Let us know if you need further assistance. The Tutorials Dojo team is dedicated to help you pass your AWS exam on your first try!
Regards,
Jon Bonso @ Tutorials Dojo
