hard20 pts · first answer countscloud-securitykmss3

Changing a bucket's default key

You change an S3 bucket's default encryption from key A to key B, then disable key A a week later. Users report old files fail to download. Why?

A.Existing objects stay encrypted under key A until rewrittenB.S3 re-encrypts old objects slowly and had not finished yetC.Key B cannot decrypt objects older than its own creation dateD.Disabling a key deletes every object encrypted under it

Discussion 0

Join free to post in the discussion.

Changing a bucket's default key

Discussion 0

Related questions