Encryption can be done in 4 methods

  1. AWS SSE
    1. S3 managed, aws/s3 (SSE-S3)
    2. Cusomter managed (SSE-C)
    3. KMS (SSE-KMS)
  2. Client Side

S3 By default encrypts objects that doesn’t have anything mentioned about encyrption with SSE-S3