Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-4256

Add support for all AWS S3 Encryption Options

    XMLWordPrintableJSON

    Details

      Description

      NiFi currently only supportsĀ SSE-S3 encryption (AES256).

      Support needs to be added for:

      • SSE-S3
      • SSE-KMS
      • SSE-C
      • CSE-KMS CMK
      • CSE-Master Key

      With all of the appropriate configuration options and such that SSE is available only for PutS3Object whilst CSE is available also for FetchS3Object.

      Given that this will add another 20 or so UI properties the intention is to split it into a Client Side Encryption Service and Server Side Encryption Service. This will allow users to reuse "encryption" across different workflows.

      Existing flows using the Server Side Encryption option will still work as is but will be overridden if a service is added.

        Attachments

        1. Screenshot_20190706_115751.png
          26 kB
          Troy Melhase

          Issue Links

            Activity

              People

              • Assignee:
                tmelhase Troy Melhase
                Reporter:
                nadenf Franco
              • Votes:
                0 Vote for this issue
                Watchers:
                9 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 5h 40m
                  5h 40m