Options for encryption of binaries in AWS S3 buckets

Avatar

Avatar
Boost 5
Level 2
iainc65537558
Level 2

Likes

5 likes

Total Posts

35 posts

Correct reply

3 solutions
Top badges earned
Boost 5
Validate 1
Boost 3
Boost 1
Applaud 5
View profile

Avatar
Boost 5
Level 2
iainc65537558
Level 2

Likes

5 likes

Total Posts

35 posts

Correct reply

3 solutions
Top badges earned
Boost 5
Validate 1
Boost 3
Boost 1
Applaud 5
View profile
iainc65537558
Level 2

31-08-2018

What options does the S3 connector support for AWS's various data encryption options?

AWS supports a number of ways of encrypting data at rest. We are looking at the options available to allow us to do that either by S3-Managed Keys, KMS-Managed Keys or Customer provided keys.  Protecting Data Using Server-Side Encryption - Amazon Simple Storage Service

Looking for guidance on how to configure these options within AWS and config settings required in AEM.

Replies

Avatar

Avatar
Coach
Employee
Jörg_Hoh
Employee

Likes

1,134 likes

Total Posts

3,161 posts

Correct reply

1,079 solutions
Top badges earned
Coach
Give back 600
Ignite 5
Ignite 3
Ignite 1
View profile

Avatar
Coach
Employee
Jörg_Hoh
Employee

Likes

1,134 likes

Total Posts

3,161 posts

Correct reply

1,079 solutions
Top badges earned
Coach
Give back 600
Ignite 5
Ignite 3
Ignite 1
View profile
Jörg_Hoh
Employee

02-09-2018

I am not aware of a way to store binaries encrypted in S3. You might want to raise on the one of the Oak mailing lists.

Apache Jackrabbit - Mailing Lists

Jörg

Avatar

Avatar
Boost 5
Level 2
iainc65537558
Level 2

Likes

5 likes

Total Posts

35 posts

Correct reply

3 solutions
Top badges earned
Boost 5
Validate 1
Boost 3
Boost 1
Applaud 5
View profile

Avatar
Boost 5
Level 2
iainc65537558
Level 2

Likes

5 likes

Total Posts

35 posts

Correct reply

3 solutions
Top badges earned
Boost 5
Validate 1
Boost 3
Boost 1
Applaud 5
View profile
iainc65537558
Level 2

03-09-2018

Hi, Just an update.

I configured my S3 Buckets to use Default Encryption of both SSE-S3 and SSE-KMS and in both instances assets were stored and the console indicated that the correct encryption was being used.

The API does support headers to give details of the required encryption, but the AEM S3 connector does not appear to send them so I guess at the moment we are limited to default encryption options.

Thanks