"Historically AWS Identity IAM keys are leaked and used ... "This can be achieved by leveraging the Condition element in IAM policies to prevent unauthorized applications of SSE-C on S3 buckets ...