amazon web services - how to query kms encrypted data in redshift -


i have encrypted s3 keys aws kms , pushed redshift via copy command. encrypted file contains ciphertextblob , key fields. there way can query real data encrypted already?

the real data this

{"id":"1","name":"dummyname",age:"42"} 

my encrypted data looks this

{"ciphertextblob":[1,2,3,0,120,233,75,200,66,143,164,147,227,238,147,160,116,177,169,157,151,230,181,14,191,156,140,146,43,184,202,30,55,51,17,114,237,1,96,101,196,239,48,167,210,15,193,102,57,210,110,143,138,232,0,0,0,126,48,124,6,9,42,134,72,134,247,13,1,7,6,160,111,48,109,2,1,0,48,104,6,9,42,134,72,134,247,13,1,7,1,48,30,6,9,96,134,72,1,101,3,4,1,46,48,17,4,12,14,218,49,42,14,25,206,72,238,21,16,108,2,1,16,128,59,185,185,70,8,156,85,194,144,17,206,233,181,87,105,10,140,135,145,66,47,247,242,163,1,69,237,116,152,162,95,86,73,209,218,214,205,204,214,243,151,78,99,3,19,56,105,58,202,158,36,227,244,108,99,93,209,4,50,113],"plaintext":[243,146,203,144,109,46,20,207,245,11,58,63,178,191,136,49,243,247,189,88,11,28,59,222,217,53,156,239,233,15,129,22],"keyid":"arn:aws:kms:<region>:<id>:key/<key>"} 

when pushed redshift via copy command, there ways aws decrypt data default , allows querying real data?

aws kms encyprtion redshift

if did s3 encryption or client side encryption(aws cli) using aws kms keys, , pushed data redshift using copy command ,you can query data data in decrypted format in redshift database.

only during loading,your data encrypted format , redshift uses aws kms keys decrypt pushed data redshift.


Comments

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

vue.js - Create hooks for automated testing -

Add new key value to json node in java -