Expand my Community achievements bar.

July 31st AEM Gems Webinar: Elevate your AEM development to master the integration of private GitHub repositories within AEM Cloud Manager.

Options for encryption of binaries in AWS S3 buckets


Level 3

What options does the S3 connector support for AWS's various data encryption options?

AWS supports a number of ways of encrypting data at rest. We are looking at the options available to allow us to do that either by S3-Managed Keys, KMS-Managed Keys or Customer provided keys.  Protecting Data Using Server-Side Encryption - Amazon Simple Storage Service

Looking for guidance on how to configure these options within AWS and config settings required in AEM.

2 Replies


Employee Advisor

I am not aware of a way to store binaries encrypted in S3. You might want to raise on the one of the Oak mailing lists.

Apache Jackrabbit - Mailing Lists



Level 3

Hi, Just an update.

I configured my S3 Buckets to use Default Encryption of both SSE-S3 and SSE-KMS and in both instances assets were stored and the console indicated that the correct encryption was being used.

The API does support headers to give details of the required encryption, but the AEM S3 connector does not appear to send them so I guess at the moment we are limited to default encryption options.