s3-encryption

s3-encryption copied to clipboard

It would be nice if `S3EncryptionClient` transparently extended the boto client and preserved the boto API. `get_object` returns a different response than the boto client, there is no support for...

josharenson

s3_encryption reads entire blob into memory when processing encrypted data which can be problematic for some uses

10

We can avoid this if we add chunking (and file 'handles') [here](https://github.com/tedder/s3-client-side-encryption/blob/master/put.py#L68) Issue added by way of [gist](https://github.com/tedder/s3-client-side-encryption/blob/master/put.py#L68) by @tedder:

boldfield

Missing the decode_encryption_key in the sample code (see below)

4

REGION = 'us-west-2' BUCKET = 'testing.stuff.bucket' s3_key = 'testing.txt' s3 = boto3.client('s3', region_name=REGION) encoded_key = s3.get_object(Bucket=BUCKET, Key=s3_key + '.key') plaintext_key = **decode_encryption_key**(encoded_key) s3e = S3EncryptionClient(encryption_key=plaintext_key, region_name=REGION) print s3e.get_object(Bucket=BUCKET, Key=s3_key) >...

imlocn

Client Side with KMS

3

Hey, Any plans to allow this to work with AWS KMS? Started working on it and happy to help.

ty-dev