A high-volume S3 ingestion workload uses SSE-KMS and produces many objects. The team wants to reduce applicable KMS request costs without removing KMS-backed encryption. Which feature should it evaluate?

Published
  1. Disable encryption and leave the KMS key ARN in an object tag.
  2. S3 Bucket Keys for the supported SSE-KMS configuration, with a review of key-policy and encryption-context implications.
  3. Use only an S3 lifecycle storage-class transition and assume that it enables Bucket Keys for every existing object.
  4. Increase the KMS request quota and assume that a higher quota reduces the price of each request.

Comments — 0