Brian Oldfield comments

Repositories
Issues
Comments

Results 3 comments of


                                            Brian Oldfield

Missing the decode_encryption_key in the sample code (see below)

There's several ways to approach getting the plaintext key. My assumption here was that it would be generated somewhere else making calls to the KMS service and exist in scope...

Client Side with KMS

Sorry for the delay! I don't have any plans to add KMS support, but would be happy to take a PR :+1:

s3_encryption reads entire blob into memory when processing encrypted data which can be problematic for some uses

Thanks for picking this up! I've been meaning to get to this for way too long... and I thoroughly appreciate the updates, don't worry about over communication. It sounds like...