Options for encryption of binaries in AWS S3 buckets

[iainc65537558]

What options does the S3 connector support for AWS's various data encryption options?

AWS supports a number of ways of encrypting data at rest. We are looking at the options available to allow us to do that either by S3-Managed Keys, KMS-Managed Keys or Customer provided keys.  Protecting Data Using Server-Side Encryption - Amazon Simple Storage Service

Looking for guidance on how to configure these options within AWS and config settings required in AEM.

[Jörg_Hoh]

I am not aware of a way to store binaries encrypted in S3. You might want to raise on the one of the Oak mailing lists.

Apache Jackrabbit - Mailing Lists

Jörg

[iainc65537558]

Hi, Just an update.

I configured my S3 Buckets to use Default Encryption of both SSE-S3 and SSE-KMS and in both instances assets were stored and the console indicated that the correct encryption was being used.

The API does support headers to give details of the required encryption, but the AEM S3 connector does not appear to send them so I guess at the moment we are limited to default encryption options.

Thanks