Overview of Server-Side Encryption with Customer-Provided Keys (SSE-C)
SSE-C allows you to encrypt data at rest in Amazon S3 general purpose buckets using your own encryption keys. Amazon S3 manages the encryption and decryption process as data is written to or read from disks, meaning you do not need to implement encryption logic in your code. However, you are solely responsible for managing and storing the encryption keys. SSE-C encrypts only the object data, not the object metadata.