S3 Proxy Overview

The S3 proxy implements the AWS S3 API while providing transparent encryption of data, allowing for ease of integration with minimal disruption.

When uploading to S3 via the S3 proxy, the data is first encapsulated using the configured Antimatter domain. The data object is tagged in AWS to make it easy to identify which items are encrypted with Antimatter. When downloading from S3 via the S3 proxy, the S3 proxy checks if the object is encrypted by checking for encryption headers in the data.