Default Encryption for new S3 Objects Default Encryption for new S3 Objects Amazon Web Services (AWS) recently announced a new feature for its Simple Storage Service (S3). This feature encrypts all new objects by… Default Encryption for new S3 Objects Amazon Web Services (AWS) recently announced a new feature for its Simple Storage Service (S3). This feature encrypts all new objects by default. S3 automatically applies server-side encryption (SSE-S3) for each new object. S3 buckets that do not use default encryption will use SSE-S3 as the default encryption option. Existing buckets currently using S3 default encryption will not change. You can always opt-in for different encryption options (SSE-KMS, SSE-C). Before default encryption, users had to manually verify that encryption was enabled for the S3 bucket and make sure that it stayed that way. This could be time-consuming and prone to mistakes, as many security issues were related to S3 public access. There are several benefit...