[orf]

You’re not the only one, but that doesn’t make it crazy.

There’s a lot of confidential data stored on S3. This data is intermingled with other confidential data from lots of other companies at the storage layer. But encryption and proper access controls mitigate the risks you’ve described.

As with anything it’s a judgement call. I trust AWS to implement this correctly, and they send out all the correct signals to back this up. 1Password does as well. However lastpass never has, and so it would be a poor call to use their cloud service.