> For the complete documentation index, see [llms.txt](https://paul-gleason.gitbook.io/champlain-college-classes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://paul-gleason.gitbook.io/champlain-college-classes/sys-360-cloud-admin/labs/lab-4-2-s3-sse-client-provided-keys.md).

# Lab 4-2: S3 SSE - Client Provided Keys

## Client Provided Keys:

Install the openssl windows binary. Then cd to the bin directory in that folder.

```
.\openssl version
```

<figure><img src="/files/njMvsX5NkifSnViTWFDK" alt=""><figcaption></figcaption></figure>

### Create key for encrypting file:

```
.\openssl enc -aes-128-cbc -k secret -P
```

### Upload and download file:

s3 buckets are s3://*bucket\_name/folder(if needed)/filename*

```
aws s3 cp source destination
```

**Screenshot of terminal output  of successful CLI upload of file using your client key**

<figure><img src="/files/2sBKMClMoqeANgSudyfF" alt=""><figcaption></figcaption></figure>

**Screenshot of terminal output  of successful CLI download of file using your client key**

<figure><img src="/files/ER2MZRetapIzfINToFpH" alt=""><figcaption></figcaption></figure>