0

In one of my product I want the following compliances to be available

  1. in-transit data protection
  2. Data-protection at rest
  3. In regions data storage

I am using AWS S3 for data storage

What I know till now is

If I use HTTPS (with AWS or ant 256bit encryption SSL ) the data transfer is secure by default and it satisfies 1 i.e (in-transit data protection ). Correct me if I understand it wrong

If If I use Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3) (https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html) I can achieve 2 i.e ( Data-protection at rest). There are other options as well to encrypt data at rest. Please suggest if some other option you might have tried and better than this.

Now comes the 3 ( In regions data storage) I have no idea how can I achieve this or I understand that compliance right. I have found a few products who claim this compliance
Like this

Now, organizations in Europe, Asia, Canada or Australia can use local data storage to address regional and some country-specific data privacy concerns, customer data residency concerns and requirements to store files in-region.

Shall I have separate s3 buckets in each region for the country we are serving? And depends upon the user location will store data in their specific region bucket? as of now, we will be in US, UAE, EU.

shivanisdev
  • 687
  • 6
  • 16
  • 1
    What do you mean by "In regions data storage"? Are you saying that the data stored in a particular AWS Region should _stay_ in that region? If so, Amazon S3 meets that requirement. Data will only be copied to a different region if you configure this to happen. – John Rotenstein Aug 27 '20 at 09:07
  • @JohnRotenstein As I mentioned I am not much clear about "In-Region data storage". As this company says (https://www.box.com/en-in/zones) they store data in the region (as I highlighted in my question), to me, it seems they might have s3 buckets in each region and they store client data in that region as per the location of theirs customer. that's what I want to clear. – shivanisdev Aug 27 '20 at 12:32
  • If you do not understand your requirements, then it is difficult for us to provide information on those requirements. – John Rotenstein Aug 27 '20 at 21:36

0 Answers0