encrypt all the bits - Githubissues

mapbox / dynamodb-replicator

module for dynamodb multi-region replication

ISC License

129 stars 48 forks source link

encrypt all the bits #95

Open btalbot opened 7 years ago

btalbot commented 7 years ago

enable S3 ServerSideEncryption for all writes. S3 doesn't charge any extra for using encryption and there's no reason not to. AES256 using the S3 managed keys are used by default but can be changed to use KMS keys be setting the ENV variables ServerSideEncryption='aws:kms' and SSEKMSKeyId=kms-key-id