Amazon Redshift Connector Best Practices

Back Next

Data Encryption

You can encrypt data while loading the table data as staging files to Amazon S3.

When you read data from an Amazon Redshift source, you can select one of the following encryption types:

Server-side encryption with Amazon S3-managed keys (SSE-S3)

Client-side encryption with a customer-managed key (CSE-CMK)

When you write data to an Amazon Redshift target, you can select one of the following encryption types:

Server-side encryption with Amazon S3-managed keys (SSE-S3)

Server-side encryption with AWS KMS-managed keys (SSE-KMS)

Client-side encryption with master symmetric key.

To encrypt data using AWS KMS-managed keys, you must provide the customer master key ID when you configure the Amazon Redshift connection.