mikecdavis opened a new issue #6564:
URL: https://github.com/apache/incubator-pinot/issues/6564
The current S3PinotFS implementation does not support server-side
encryption, although it is supported via the underlying AWS SDK. Support can be
added by capturing the required parameters via configuration and passing them
through to the respective SDK calls.
Example configuration:
```
pinot.controller.storage.factory.s3.serverSideEncryption="aws:kms"
pinot.controller.storage.factory.s3.ssekmsKeyId=my-kms-key
```
Example usage:
```java
PutObjectRequest.Builder putReqBuilder =
PutObjectRequest.builder().bucket(uri.getHost()).key(path);
if (this.sseEnabled) {
putReqBuilder.serverSideEncryption(this.serverSideEncryption);
putReqBuilder.ssekmsKeyId(this.ssekmsKeyId);
}
```
Ref:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/specifying-kms-encryption.html
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@pinot.apache.org
For additional commands, e-mail: commits-h...@pinot.apache.org
