Encrypting data in S3 with Stepfunctions
- 1. JIMMY DAHLQVIST | 2024-03-14 Encrypting data in S3 with StepFunctions
- 2. @jimmydahlqvist Todays agenda β’ The problem β’ StepFunctions β’ Gotchas β’ Build It!
- 3. @jimmydahlqvist JIMMY DAHLQVIST Serverless enthusiast AWS Ambassador & AWS Community Builder & User Group Leader Founder of serverless-handbook.com Head of AWS @ Sigma Technology Cloud Β§
- 4. @jimmydahlqvist Problem β’ Server-side encryption with Amazon S3 managed keys (SSE-S3) β’ Thousands of objects β’ New compliance requirement β’ SSE-KMS (Customer managed keys) β’ Encrypt existing and new objects
- 5. @jimmydahlqvist Solution β’ AWS S3 default encryption SSE-KMS β’ Alternative set a bucket policy β’ AWS StepFunctions to the rescue β’ No-Code / Low-Code solution
- 7. @jimmydahlqvist StepFunctions β’ Distributed Map State β’ Loop over all objects β’ S3 integration, copy object β’ Choice To check encryption
- 8. @jimmydahlqvist Service / SDK integrations β’ 15+ service integrations β’ 200+ SDK integrations
- 15. @jimmydahlqvist Gotchas β’ S3 SDK copy support objects up to 5GB in size
- 16. Build It