<mxfile host="Electron" version="29.6.1">
  <diagram name="Page-1" id="diagram-s3-ssec">
    <mxGraphModel dx="1200" dy="800" grid="0" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="0" pageScale="1" pageWidth="1500" pageHeight="900" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="title-text" parent="1" style="text;html=1;align=left;verticalAlign=top;fontSize=30;fontStyle=1;fontFamily=Helvetica;fontColor=light-dark(#232F3E,#FFFFFF);" value="Amazon S3: SSE-C Default Disable Migration (April 2026)" vertex="1">
          <mxGeometry x="50" y="30" width="1200" height="40" as="geometry" />
        </mxCell>
        <mxCell id="subtitle-text" parent="1" style="text;html=1;align=left;verticalAlign=top;fontSize=16;fontFamily=Helvetica;fontColor=light-dark(#232F3E,#D4D4D4);" value="Audit writers still sending customer keys; block SSE-C; migrate new writes to SSE-KMS" vertex="1">
          <mxGeometry x="50" y="70" width="1200" height="30" as="geometry" />
        </mxCell>
        <mxCell id="title-separator" parent="1" style="line;strokeWidth=2;html=1;strokeColor=#FF9900;fontFamily=Helvetica;" value="" vertex="1">
          <mxGeometry x="50" y="105" width="1180" height="10" as="geometry" />
        </mxCell>
        <mxCell id="legacy-container" parent="1" style="fillColor=#FFEBEE;strokeColor=#DD344C;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#DD344C;fontFamily=Helvetica;container=1;collapsible=0;" value="Legacy SSE-C writer" vertex="1">
          <mxGeometry x="50" y="240" width="140" height="100" as="geometry" />
        </mxCell>
        <mxCell id="modern-container" parent="1" style="fillColor=#E8F5E9;strokeColor=#1D8102;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#1D8102;fontFamily=Helvetica;container=1;collapsible=0;" value="Migrated writer" vertex="1">
          <mxGeometry x="50" y="400" width="140" height="100" as="geometry" />
        </mxCell>
        <mxCell id="aws-cloud" parent="1" style="points=[[0,0],[0.25,0],[0.5,0],[0.75,0],[1,0],[1,0.25],[1,0.5],[1,0.75],[1,1],[0.75,1],[0.5,1],[0.25,1],[0,1],[0,0.75],[0,0.5],[0,0.25]];outlineConnect=0;gradientColor=none;html=1;whiteSpace=wrap;fontSize=12;fontStyle=0;shape=mxgraph.aws4.group;grIcon=mxgraph.aws4.group_aws_cloud;strokeColor=light-dark(#232F3E,#E4F0FF);fillColor=light-dark(#232F3E0D,#232F3E0D);fillStyle=auto;verticalAlign=top;align=left;spacingLeft=30;fontColor=#232F3E;dashed=0;container=1;pointerEvents=0;collapsible=0;recursiveResize=0;fontFamily=Helvetica;" value="AWS Cloud" vertex="1">
          <mxGeometry x="240" y="140" width="880" height="560" as="geometry" />
        </mxCell>
        <mxCell id="grp-s3" parent="1" style="fillColor=#E6F6EA;strokeColor=#1D8102;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#1D8102;fontFamily=Helvetica;container=1;collapsible=0;" value="Storage" vertex="1">
          <mxGeometry x="320" y="280" width="120" height="120" as="geometry" />
        </mxCell>
        <mxCell id="svc-s3" parent="grp-s3" style="sketch=0;outlineConnect=0;fontColor=#232F3E;fillColor=#1D8102;strokeColor=#ffffff;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;fontSize=10;fontStyle=0;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.s3;fontFamily=Helvetica;" value="Amazon S3&lt;div&gt;&lt;i&gt;SSE-C blocked default&lt;/i&gt;&lt;/div&gt;" vertex="1">
          <mxGeometry x="36" y="30" width="48" height="48" as="geometry" />
        </mxCell>
        <mxCell id="grp-kms" parent="1" style="fillColor=#FFEBEE;strokeColor=#DD344C;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#DD344C;fontFamily=Helvetica;container=1;collapsible=0;" value="Keys" vertex="1">
          <mxGeometry x="520" y="280" width="120" height="120" as="geometry" />
        </mxCell>
        <mxCell id="svc-kms" parent="grp-kms" style="sketch=0;outlineConnect=0;fontColor=#232F3E;fillColor=#DD344C;strokeColor=#ffffff;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;fontSize=10;fontStyle=0;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.key_management_service;fontFamily=Helvetica;" value="AWS KMS&lt;div&gt;&lt;i&gt;SSE-KMS CMK&lt;/i&gt;&lt;/div&gt;" vertex="1">
          <mxGeometry x="36" y="30" width="48" height="48" as="geometry" />
        </mxCell>
        <mxCell id="grp-inv" parent="1" style="fillColor=#E6F6EA;strokeColor=#1D8102;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#1D8102;fontFamily=Helvetica;container=1;collapsible=0;" value="Discovery" vertex="1">
          <mxGeometry x="720" y="220" width="120" height="120" as="geometry" />
        </mxCell>
        <mxCell id="svc-inv" parent="grp-inv" style="sketch=0;outlineConnect=0;fontColor=#232F3E;fillColor=#1D8102;strokeColor=#ffffff;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;fontSize=10;fontStyle=0;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.s3;fontFamily=Helvetica;" value="S3 Inventory&lt;div&gt;&lt;i&gt;find SSE-C objects&lt;/i&gt;&lt;/div&gt;" vertex="1">
          <mxGeometry x="36" y="30" width="48" height="48" as="geometry" />
        </mxCell>
        <mxCell id="grp-ct" parent="1" style="fillColor=#FFEBEE;strokeColor=#DD344C;rounded=1;whiteSpace=wrap;html=1;verticalAlign=top;fontStyle=1;fontSize=12;fontColor=#DD344C;fontFamily=Helvetica;container=1;collapsible=0;" value="Audit" vertex="1">
          <mxGeometry x="720" y="380" width="120" height="120" as="geometry" />
        </mxCell>
        <mxCell id="svc-ct" parent="grp-ct" style="sketch=0;outlineConnect=0;fontColor=#232F3E;fillColor=#DD344C;strokeColor=#ffffff;dashed=0;verticalLabelPosition=bottom;verticalAlign=top;align=center;html=1;fontSize=10;fontStyle=0;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.cloudtrail;fontFamily=Helvetica;" value="CloudTrail&lt;div&gt;&lt;i&gt;SSE-C PutObject&lt;/i&gt;&lt;/div&gt;" vertex="1">
          <mxGeometry x="36" y="30" width="48" height="48" as="geometry" />
        </mxCell>
        <mxCell id="note-403" parent="1" style="rounded=1;whiteSpace=wrap;html=1;fillColor=light-dark(#FFEBEE,#3D2020);strokeColor=#DD344C;fontFamily=Helvetica;fontColor=light-dark(#232F3E,#FFFFFF);align=left;verticalAlign=top;fontSize=11;spacingLeft=8;spacingTop=6;" value="&lt;b&gt;Blocked SSE-C write&lt;/b&gt;&lt;br&gt;HTTP 403 AccessDenied on PutObject / CopyObject / multipart when BlockedEncryptionTypes includes SSE-C" vertex="1">
          <mxGeometry x="320" y="480" width="320" height="80" as="geometry" />
        </mxCell>
        <mxCell id="legend-box" parent="1" style="rounded=1;whiteSpace=wrap;html=1;fillColor=light-dark(#EDF3FF,#305363);strokeColor=light-dark(#6c8ebf,#6c8ebf);fontFamily=Helvetica;fontColor=light-dark(#232F3E,#FFFFFF);align=left;verticalAlign=top;fontSize=12;spacingLeft=10;spacingTop=8;" value="&lt;b&gt;Flow Steps&lt;/b&gt;&lt;br&gt;&lt;span style=&quot;color: light-dark(rgb(0,0,0), rgb(255,255,255));&quot;&gt;1. Legacy SSE-C uploads hit blocked buckets (403)&lt;br&gt;2. Inventory finds historical SSE-C objects&lt;br&gt;3. CloudTrail reveals writers still sending keys&lt;br&gt;4. Migrated writers use SSE-KMS via KMS CMK&lt;br&gt;5. Keep SSE-C block; exception only if dated&lt;br&gt;6. Existing SSE-C objects remain readable with keys&lt;/span&gt;" vertex="1">
          <mxGeometry x="1180" y="140" width="280" height="560" as="geometry" />
        </mxCell>
        <mxCell id="edge-1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#DD344C;fontFamily=Helvetica;dashed=1;" edge="1" source="legacy-container" target="svc-s3">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="badge-1" parent="edge-1" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;fillColor=#007CBD;fontColor=#FFFFFF;fontSize=11;fontStyle=1;fontFamily=Helvetica;" value="1" vertex="1" connectable="0">
          <mxGeometry x="-0.7" y="-1" width="28" height="28" relative="1" as="geometry" />
        </mxCell>
        <mxCell id="edge-2" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#007CBD;fontFamily=Helvetica;" edge="1" source="svc-s3" target="svc-inv">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="badge-2" parent="edge-2" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;fillColor=#007CBD;fontColor=#FFFFFF;fontSize=11;fontStyle=1;fontFamily=Helvetica;" value="2" vertex="1" connectable="0">
          <mxGeometry x="-0.2" y="-1" width="28" height="28" relative="1" as="geometry" />
        </mxCell>
        <mxCell id="edge-3" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#007CBD;fontFamily=Helvetica;" edge="1" source="svc-s3" target="svc-ct">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="badge-3" parent="edge-3" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;fillColor=#007CBD;fontColor=#FFFFFF;fontSize=11;fontStyle=1;fontFamily=Helvetica;" value="3" vertex="1" connectable="0">
          <mxGeometry x="-0.2" y="-1" width="28" height="28" relative="1" as="geometry" />
        </mxCell>
        <mxCell id="edge-4" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#1D8102;fontFamily=Helvetica;" edge="1" source="modern-container" target="svc-s3">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="badge-4" parent="edge-4" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;fillColor=#007CBD;fontColor=#FFFFFF;fontSize=11;fontStyle=1;fontFamily=Helvetica;" value="4" vertex="1" connectable="0">
          <mxGeometry x="-0.7" y="-1" width="28" height="28" relative="1" as="geometry" />
        </mxCell>
        <mxCell id="edge-5" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;strokeColor=#007CBD;fontFamily=Helvetica;" edge="1" source="svc-s3" target="svc-kms">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="badge-5" parent="edge-5" style="ellipse;whiteSpace=wrap;html=1;aspect=fixed;fillColor=#007CBD;fontColor=#FFFFFF;fontSize=11;fontStyle=1;fontFamily=Helvetica;" value="5" vertex="1" connectable="0">
          <mxGeometry x="-0.2" y="-1" width="28" height="28" relative="1" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
