3 ms·

Because there is already server side encryption. Which I guess means data on disk is always encrypted not sure about in-memory.

• flatiron 4y ago
  We also use server side encryption. But honestly encrypting the files before putting on s3 has given us 0 grief and gives us a feeling even if we somehow are “hacked” the files are useless to the hackers.
  • yunohn 4y ago
    Where is your decryption key stored?
    • flatiron 4y ago
      We have a one and done rest api that will only send the key once after being staged as part of our pipeline. So that’s the delivery mechanism. Key is on an internal server that isn’t on the public internet except the one and done. Super simple.
    • moltar 4y ago
      Post-it as a Service