RE: AWS S3 KMS encrypted store

Jamie Sammons, modified 4 Years ago. New Member Posts: 5 Join Date: 1/28/21 Recent Posts

Its is possible in liferay to hava an s3 store with static credentials generated via IAM roles (Access key and Secret Key ). Is it possble to have a server side encryption for s3   , via AWS KMS so that we dont use a static key but we have  dynamic keys

thumbnail
Olaf Kock, modified 4 Years ago. Liferay Legend Posts: 6441 Join Date: 9/23/08 Recent Posts

I haven't seen such an option in the S3 store, but its implementation should be quite simple to look at. Which means that it should be quite simple to implement a custom S3 store that encrypts/decrypts files.

Note that this now turns your "trust" problem into a key-management problem. Check what you're protecting yourself from, and if this encryption helps (I'm not saying it doesn't - just check upfront)