A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at Rest. If the user is supplying his own keys for encryption SSE-C, which of the below mentioned…

The correct answer is B. It is possible to have different encryption keys for different versions of the same object. You can encrypt the object and send it across to S3 Option A is invalid because ideally you should use different encryption keys Option C is invalid because you can use you own encryption keys Option D is invalid because encryption works even if versioning is enabled…

Submitted by deeparc· Mar 6, 2026Data Protection

Question

A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at Rest. If the user is supplying his own keys for encryption SSE-C, which of the below mentioned statements is true?

Options

AThe user should use the same encryption key for all versions of the same object
BIt is possible to have different encryption keys for different versions of the same object
CAWS S3 does not allow the user to upload his own keys for server side encryption
DThe SSE-C does not work when versioning is enabled

How the community answered

(30 responses)

A
3% (1)
B
80% (24)
C
10% (3)
D
7% (2)

Explanation

You can encrypt the object and send it across to S3 Option A is invalid because ideally you should use different encryption keys Option C is invalid because you can use you own encryption keys Option D is invalid because encryption works even if versioning is enabled https://docs.aws.ama2on.com/AmazonS3/latest/dev/UsingClientSideEncryption.html

Topics

#SSE-C#S3 versioning#customer-provided keys#encryption at rest

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice