awslabs / amazon-kinesis-producer

Amazon Kinesis Producer Library
Apache License 2.0
400 stars 331 forks source link

Is the amazon-kinesis-producer analyzed with Kinesis for FedRAMP compliance? #357

Open tjuricek-vmware opened 3 years ago

tjuricek-vmware commented 3 years ago

We are looking to deploy our current Kinesis applications in Govcloud, and want to know if the amazon-kinesis-producer library is included as part of the compliance validation for "Amazon Kinesis Data Streams".

Looks like there's a vendored build of OpenSSL that has a lot of features disabled, so I'm mostly wondering if it's just been verified that we don't need to flag it for FIPS compliance, or, if we just need to flag this as an exception.

skydreamerr commented 10 months ago

It doesn't look so since it uses MD5 https://github.com/awslabs/amazon-kinesis-producer/blob/master/aggregation-format.md