4 ms·
Kms doesn't have a size limit if used right. You should use kms to store a key and store the data on s3 encrypted.
by grogenaut 10y ago
Kms doesn't have a size limit if used right. You should use kms to store a key and store the data on s3 encrypted.
- joseph 10y agoSure, which is why I said to use e.g. credstash in such cases. It stores the secrets in DynamoDB while using KMS to handle the keys. I guess you are talking about using S3 server side encryption, which is another approach.
- acejam 10y ago+1 Upvote for credstash
- grogenaut 10y agoNo I'm literally talking about taking the row key and using it as the lookup from kms for the crypto key. Then you take the plaintext, the crypto key, encrypt the plain text and store it whereever. It's 1 additional aws api call over storing the stuff unencrypted, and about 5 lines of code in java that can be turned into a 1 line library call. Not sure why you need credstash.
- jrowley 10y agoI'm curious of cases for when people are running into size limitations for storing secrets... what type of secrets are > 4kb? I could imagine some example but I'm wondering about real world examples...
- grogenaut 10y agoEvery file or message you want to send encrypted through AWS or store permanently in S3. I often use crypto as signing as well, since it mostly comes for free code wise at my job.