Amazon Web Services has announced a significant update for Amazon S3 Express One Zone, a high-performance storage solution designed to deliver ultra-low latency for latency-sensitive applications. With this update, S3 Express One Zone now supports server-side encryption (SSE-KMS) using customer-managed AWS Key Management Service (KMS) keys.
This development is particularly noteworthy for organizations that require granular control over their encryption keys for compliance or security reasons. Previously, customers who needed SSE-KMS had to use the standard S3 storage class, which may not offer the same level of performance as S3 Express One Zone.
By enabling SSE-KMS with customer-managed KMS keys, AWS provides customers with a way to meet their security and compliance requirements without compromising performance. Businesses can now leverage the ultra-low latency offered by S3 Express One Zone while ensuring that their data is protected with the highest security standards.
Furthermore, this update integrates seamlessly with S3 Bucket Keys, a feature that reduces the number of requests made to AWS KMS by up to 99%. As a result, customers can enjoy improved performance and lower costs when using SSE-KMS with S3 Express One Zone.
In a nutshell, support for SSE-KMS using customer-managed KMS keys in S3 Express One Zone is a valuable addition to the AWS offering. It provides customers with enhanced control, flexibility, and security without impacting performance, making it an attractive option for a wide range of use cases.
