S3 Cross Region Replication with KMS Encrypted Objects | Replication Policy

[@user-pf1zk1wf7b]

Your rushing through your tutorials.

[@ValaxyTechnologies]

Yep. It is intended to be viewed as a technology demonstration(Proof Of Concept) and targeted at users with intermediate to advanced level of AWS skills. Going forward, We will look into labelling our demos with levels of difficulty.

[@ArunV-yh7gu]

can't we use single multi region key as a replica in destination bucket for CRR ?

[@hariprasadsugurthi6091]

how to execute the above commands I tried on aws cli not working any other settings are need

[@indraalapati989]

Thank you for this demo. Do we still need to do add encrypt and decrypt policies for multi-region kms keys ?

[@aravindviswanathan6884]

Yes we have to, Encrypt and Decrypt is always a default permission when we use KMS keys

[@marinatanasov3303]

What else needs to be done if the destination bucket is also in another AWS account? So, Cross-Region, Cross-Account replication.

[@pranalimudiraj119]

I would like to know the steps for copying to s3 bucket from one account to other account but the kms keys in different regions. what all should be allowed to do this.

[@ValaxyTechnologies]

If it is for production, you can email us

[@madhuvenkatesh4327]

Hi, what changes need to be done for replicating S3 with KMS Encryption across different account and/or different region. Thanks

[@ValaxyTechnologies]

What is your current setup? - How much of it is different from what is shown here?