Please enable JavaScript.

Coggle requires JavaScript to display documents.

S3 Buckets - Coggle Diagram

- - - - KMS creates the DEK using the CMK and provides Plain and encrypted DEK to S3
        
        S3 encrypts the data using DEK and discards the plaintext version of DEK. Stores ciphertext and Encrypted DEK on S3 storage system
      - Role separation is possible as KMS stores the Key
  - - - Object and hash of the key are stored. Original key is discarded.