Investigating
AEM S3 connector support for SSE-C
| Request for Feature Enhancement (RFE) Summary: | AEM S3 connector support for SSE-C |
| Use-case: |
For protection of customer data, encryption in transit and at rest is required. Some data stored in S3, requires the use of customer managed, customer provided keys. This provides an extra level of security through separation of duties, as one team/role can manage the keys, while another team/role can use the provided keys for encryption of the data.
Currently, AEM S3 connection supports only two of the valid encryption options for S3 server-side encryption. SSE-C encryption is needed to allow for that separation of duties. |
| Current/Experienced Behavior: | AEM S3 connector currently supports SSE-S3 and SSE-KMS, but not SSE-C (customer managed, customer provided keys) |
| Improved/Expected Behavior: | AEM S3 connector would support all 3 encryption options |
| Environment Details (AEM version/service pack, any other specifics if applicable): | AEM 6.5 SP 13+ |
| Customer-name/Organization name: | US Government Customer |
| Screenshot (if applicable): | |
| Code package (if applicable): |