Let's try all the different S3 encryption options, see why it's more like access control than encryption, and why that matters.

Good overview on how it works and why being compliant does not mean being secure.