{"id":9865,"date":"2017-11-07T19:03:42","date_gmt":"2017-11-07T19:03:42","guid":{"rendered":"https:\/\/rsoftsolution.com\/blog\/new-tools-help-could-help-prevent-amazon-s3-data-leaks.html"},"modified":"2017-11-07T19:03:42","modified_gmt":"2017-11-07T19:03:42","slug":"new-tools-help-could-help-prevent-amazon-s3-data-leaks","status":"publish","type":"post","link":"https:\/\/www.rbsitsoftwaresolution.in\/blog\/new-tools-help-could-help-prevent-amazon-s3-data-leaks.html","title":{"rendered":"New tools help could help prevent Amazon S3 data leaks"},"content":{"rendered":"


\n<\/p>\n

If you do a search for Amazon S3 breaches due to customer error of leaving the data unencrypted, you\u2019ll see a long list that includes a DoD contractor<\/a>, Verizon<\/a> (the owner of this publication) and Accenture<\/a>, among the more high profile examples. Today, AWS announced a new set of five tools <\/a>designed to protect customers from themselves and ensure (to the extent possible) that the data in S3 is encrypted and safe.<\/p>\n

For starters, the company is giving the option of default encryption. That means every object that gets moved into an S3 bucket will have encryption on by default. What\u2019s more, this will happen without admins having to construct a rejected bucket for unencrypted files. It\u2019s not exactly foolproof, but it gives admins a good solid way to ensure the data is always encrypted in a much smoother way than before.<\/p>\n

If that\u2019s not enough, Amazon is putting a signal front and center on the administrative console that warns admins with a prominent indicator next to each S3 bucket that has been left open to the public. If something slips through the cracks at the end user level, this should at least give admins an additional level of protection that something is amiss.<\/p>\n

Sometimes things go wrong when customers move data across regions and don\u2019t move permissions with it to the destination account. \u00a0Access Control Lists (ACLs)<\/a> let admins define and manage who has access to buckets and objects in S3. It\u2019s basically ensuring that permissions travel with the data when you move it.<\/p>\n

In addition, admins can replicate objects that are encrypted with keys that are managed by AWS Key Management Service (KMS). The latter means admins don\u2019t have to worry about managing the encryption keys themselves, yet can still have the benefits of having encrypted S3 data.<\/p>\n

Finally, should all else fail, there is a report, which includes the encryption status of each object in S3. Of course, you have to read it, but it\u2019s there as an additional tool in the battle against human error.<\/p>\n

While the nothing can completely prevent unencrypted data from entering S3 storage, these tools do go a long way toward giving admins the ability to set policy more easily and determine whenever unencrypted information is out there.<\/p>\n

<\/p>\n

Featured Image: rawpixel\/Getty Images<\/small><\/p>\n

Article source: http:\/\/feedproxy.google.com\/~r\/techcrunchIt\/~3\/ZfLomWWu83Y\/<\/p>","protected":false},"excerpt":{"rendered":"

If you do a search for Amazon S3 breaches due to customer error of leaving the data unencrypted, you\u2019ll see a long list that includes a DoD contractor, Verizon (the <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[19],"tags":[25],"class_list":["post-9865","post","type-post","status-publish","format-standard","hentry","category-enterprise-software","tag-enterprise"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t