Setting up the correct permissions for cross-region replication of KMS-encrypted objects

1

Amazon S3

Some AWS users want to replicate their S3 objects to another region for audit or backup reasons.

#Cloud Hosting #Object Storage #Cloud Storage 171 social mentions

2

Amazon Key Management Service

We'll apply server-side encryption with a KMS-managed key. We'll have to create a new key in us-east-1 that S3 uses to encrypt the objects.

#Network & Admin #Security & Privacy #Password Management 34 social mentions

3

AWS Identity and Access Management

S3 will need an IAM role to perform the object replication.

#Identity And Access Management #Identity Provider #SSO 52 social mentions