PREVENTING UNINTENDED ENCRYPTION OF AMAZON S3 OBJECTS

Summary from the TLDR InfoSec newsletter

AWS detected unauthorized encryption activities in Amazon S3 due to malicious actors with valid credentials. Customers can prevent such incidents by using short-term credentials, implementing data recovery procedures, and monitoring access patterns. AWS notes that blocking of use of SSE-C encryption can also enhance security against unauthorized access.