1 Answers
In this particular example, by clicking on the object link, he’s now viewing the file publicly. He’s not viewing the document as ‘John Adams’ the IAM user, he’s viewing it as just some random internet user who doesn’t have access to the encryption key. In the case of using the server side encryption, with Amazon having the key, and the object marked as public you can open it because Amazon has access to the key in this case.
So what would need to be done for John Adams to view the file?