After accessing the buckets, they would use AWS server-side encryption with customer provided ... also using AWS S3 native features. Speaking to The Register, VP of services with the Halcyon ...

it could pose a systemic threat to organizations using Amazon S3 for critical data storage,” the report adds. The attacker leverages AWS’s Server-Side Encryption with Customer Provided Keys ...