search

elastic / elasticsearch-cloud-aws

AWS Cloud Plugin for Elasticsearch
https://github.com/elastic/elasticsearch/tree/master/plugins/discovery-ec2
577 stars 181 forks source link

Client-side S3 encryption for Snapshots #187

Closed jondb closed 9 years ago

jondb commented 9 years ago

Hi, I see that the s3 plugin supports server-side-encryption for s3. I'm wondering what it would take to add:

a. a custom function to implement per-file key management for client-side-encryption, b. a list of keys (use newest key for encryption, try all for decryption to support key rotation) to use with an hmac-based-kdf that can be leveraged to provide a per-file key for client-side-encryption, or c. a global key that can be configured and used for client-side-encryption

Even some advice for how to implement and write tests would be a great start.

Thanks

https://github.com/elasticsearch/elasticsearch-cloud-aws/blob/master/src/main/java/org/elasticsearch/repositories/s3/S3Repository.java

dadoonet commented 9 years ago

I think it's a duplicate of #118.

Closing but feel free to reopen or comment in #118.