Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Dynamodb Enhanced Client support for Encryption

See original GitHub issue

Describe the issue

Recently we were evaluating to upgrade to enhanced dynamo db client. In production, all our customer information is encrypted. In the existing implementation, we pass the encryption material provider in the constructor of DynamoDBMapper like:

DynamoDBMapper scanMapper = new DynamoDBMapper(dynamoDbCLient, scanConfig, new AttributeEncryptor(encryptionMaterialProvider));

As per my understanding, in the enhanced dynamo db client DynamoDbTable is the replacement, but neither its constructor nor any other method has the flexibility to pass the Encryption material provider.

My question is, isnt encryption supported in the enhanced dynamo db client? If it does, can someone please point me to the right API or may be a sample code?

Your Environment

AWS Java SDK version used: dynamodb-enhanced-2.13.27
JDK version used: JDK 11
Operating System and version: MacOS Mojave

Issue Analytics

State:
Created 3 years ago
Reactions:23
Comments:9 (3 by maintainers)

Top GitHub Comments

6reactions

yanzhangusccommented, Sep 2, 2021

There has been 1.5 years since the release of the EnhancedClient, the client side encryption support seems to be essential for any user that has a more strict security requirement. Can we get this prioritized?

0reactions

lifehetucommented, Aug 4, 2022

Hi,

Is using the AWS Enhanced Client a bottleneck regarding data encryption? How is one supposed to encrypt data using the AWS-recommended Enhanced Client library?

Top Results From Across the Web

Example code for the DynamoDB Encryption Client for Java

The following examples show you how to use the DynamoDB Encryption Client for Java to protect DynamoDB table items in your application.

DynamoDB - AWS Encryption Tutorial

DynamoDB encryption at rest provides enhanced security by encrypting all your data at rest using encryption keys stored in AWS Key Management Service...

DynamoDB Encryption - Jayendra's Cloud Certification Blog

communications to and from DynamoDB use the HTTPS protocol, which protects network traffic using SSL/TLS encryption. Data can also be protected using client- ......

Amazon DynamoDB Encryption Options - Cloud Academy

The encryption client works by encrypting these values, not the name, of your DynamoDB attributes which are then protected by a signature to...

Client-side Encryption Amazon DynamoDB - SourceForge

The Amazon DynamoDB Client-side Encryption in Java supports encryption and signing of your data when stored in Amazon DynamoDB.