opensearch-project / opensearch-project/data-prepper

Support KMS encryption key rotation in Kafka buffer

Open
#3,979 0 comments 0 reactions 1 assignee View on GitHub

@dlvenable is already working on this.

Since Jan 18, 2024.

enhancement
Dominant language
Java
Stars
374
Forks
354
Avg merge
3d 18h
Merged PRs (30d)
8

Description

Summary

The kafka buffer should support rotating the encryption_key. This is a high-level issue for supporting key rotation. Data Prepper is not doing any key rotation on KMS. Instead, it will support rotation of the encryption_key which is encrypted by a KMS key.

Tasks

  • #3655
  • Use the embedded encrypted_data_key to decrypt data when present
  • #3980
  • #4040

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.