Encryption

1. KMS (Key Management Service) or CloudHSM is used to generate encryption keys

2. Data key encrypts the data

3. S3 stores encrypted data and data encryption key