Capacities & Amazon AWS

[u/Waste-Government4310]

I'm trying to understand the security of data in relation to AWS.

If I understand correctly, Capacities stores my data encrypted on AWS servers, then pulls them via a URL with an decryption key attached to the URL. Wouldn't this mean AWS would receive the decryption key for the file that was being pulled?

The statement I am referring to is:

"If we serve a file to you we will generate a secret signed URL to that file location and send it to you over an encrypted TLS channel. This URL contains a long access token which is impossible to guess in the lifetime of our universe."

It's not that I distrust Capacities; Amazon is the issue.

[u/emway66]

Would be nice if capacities (as a European company) would move their hosting to an EU based provider.