Amazon S3 Express One Zone now offers server-side encryption with AWS Key Management Service using customer managed keys, allowing secure management of encryption keys and a cost-effective way to access encrypted objects while maintaining single-digit millisecond data access.

<div>
<p>The article summarizes the addition of AWS Key Management Service (KMS) support with customer managed keys for Amazon S3 Express One Zone. This expands the encryption options beyond the default S3 managed keys (SSE-S3).</p>
<p>Specifically, the article covers:</p>
<ul>
<li>Customer managed keys allow setting key policies to control data access</li>
<li>CloudTrail logging for key usage</li>
<li>S3 Bucket Keys reduce KMS requests and costs while maintaining fast data access</li>
<li>Available in all AWS Regions where S3 Express One Zone storage class is offered</li>
<li>Can be configured via S3 console, AWS CLI, or SDKs</li>
</ul>
</div>


Amazon S3 Express One Zone now supports AWS-KMS with customer managed keys

Related articles

Related articles

Sep 17
2024
Amazon S3 Express One Zone now supports AWS KMS with customer managed keys

Aug 13
2024
Announcing Amazon S3 Express One Zone storage class support on Amazon EMR

Apr 20
2026
Amazon S3 Express One Zone now supports S3 Inventory

Nov 21
2024
Amazon S3 Express One Zone now supports S3 Lifecycle expirations