Home / Amazon / SAA-C01 / Question 97

A Solutions Architect is defining a shared Amazon S3 bucket where corporate applications will save objects.How can the Architect ensure that when an application uploads an object to the Amazon S3 bucket, the object is encrypted?

• Set a CORS configuration.

• Set a bucket policy to encrypt all Amazon S3 objects.

• Enable default encryption on the bucket.

• Set permission for users.

https://aws.amazon.com/blogs/security/how-to-prevent-uploads-of-unencrypted-objects-to-amazon-s3/