Highlighted

Options for encryption of binaries in AWS S3 buckets

Avatar

Avatar

iainc65537558

Avatar

iainc65537558

iainc65537558

31-08-2018

What options does the S3 connector support for AWS's various data encryption options?

AWS supports a number of ways of encrypting data at rest. We are looking at the options available to allow us to do that either by S3-Managed Keys, KMS-Managed Keys or Customer provided keys.  Protecting Data Using Server-Side Encryption - Amazon Simple Storage Service

Looking for guidance on how to configure these options within AWS and config settings required in AEM.

Replies

Highlighted

Avatar

Avatar

Jörg_Hoh

Employee

Total Posts

3.0K

Likes

910

Correct Answer

1.0K

Avatar

Jörg_Hoh

Employee

Total Posts

3.0K

Likes

910

Correct Answer

1.0K
Jörg_Hoh
Employee

02-09-2018

I am not aware of a way to store binaries encrypted in S3. You might want to raise on the one of the Oak mailing lists.

Apache Jackrabbit - Mailing Lists

Jörg

Avatar

Avatar

iainc65537558

Avatar

iainc65537558

iainc65537558

03-09-2018

Hi, Just an update.

I configured my S3 Buckets to use Default Encryption of both SSE-S3 and SSE-KMS and in both instances assets were stored and the console indicated that the correct encryption was being used.

The API does support headers to give details of the required encryption, but the AEM S3 connector does not appear to send them so I guess at the moment we are limited to default encryption options.

Thanks