Amazon S3 Connector

Back Next

Data Encryption in Amazon Targets

To protect data, you can enable server-side encryption or client-side encryption to encrypt data inserted in Amazon S3 buckets. You can encrypt data by using the master symmetric key.

If you use AWS KMS to encrypt data, you require the tag

"s3:x-amz-server-side-encryption":"aws:kms"

in the Amazon S3 bucket policy irrespective of the allow or deny permission configured for the Amazon S3 bucket policy.

Master symmetric key is a 256-bit AES encryption key in the Base64 format that is used to enable client-side encryption. You can generate master symmetric key by using a third-party tool.

Server-side Encryption

Enable server-side encryption if you want to use Amazon S3-managed encryption key to encrypt the data while uploading the delimited files to the buckets. To enable server-side encryption, select

Server Side Encryption

as the encryption type in the advanced target properties.

Client-side Encryption

Enable client-side encryption if you want the Secure Agent to encrypt the data while uploading the delimited files to the buckets. To enable client-side encryption, you must provide a master symmetric key when you create an Amazon connection. Then, select

Client Side Encryption

as the encryption type in the advanced target properties.

Amazon S3 Objects

Download Guide

Watch

Comments

Cloud Connectivity Homepage

Communities

Knowledge Base

Success Portal