You can choose to encrypt objects stored in your Amazon S3 bucket. Trellix DLP – SaaS supports both Amazon S3 (SSE-S3), and AWS Key Management Service (SSE-KMS) key encryption types.
Log on to the AWS Management Console.
Select the bucket you want to encrypt from the Buckets list.
On Default Encryption, click Edit.
Under Server-side encryption, click Enable
Choose from either Amazon S3 key (SSE-S3) or AWS Key Management Service (SSE-KMS), depending on the type of encryption you want.
If you selected SSE-KMS, you have the choice of using an AWS managed key, choosing an existing KMS key, or directly entering the ARN of the KMS key you want to use.
Note
You can only select a KMS key from the same region as that of your bucket. Amazon S3 does not support the use of asymmetric keys for encryption. For more details, see the AWS documentation.
Having selected your key, click Enable.
Click Save.
Objects in your bucket are now encrypted.