Encrypting data in S3 with Stepfunctions

•

0 likes•7 views

Jimmy Dahlqvist

Presentation on how to encrypt data in S3 in a serverless way using KMS and setpfunctins

Internet

JIMMY DAHLQVIST | 2024-03-14
Encrypting data in S3 with
StepFunctions

@jimmydahlqvist
Todays agenda
• The problem
• StepFunctions
• Gotchas
• Build It!

@jimmydahlqvist
JIMMY DAHLQVIST
Serverless enthusiast
AWS Ambassador & AWS Community Builder & User Group Leader
Founder of serverless-handbook.com
Head of AWS @ Sigma Technology Cloud
§

@jimmydahlqvist
Problem
• Server-side encryption with Amazon S3 managed keys (SSE-S3)
• Thousands of objects
• New compliance requirement
• SSE-KMS (Customer managed keys)
• Encrypt existing and new objects

@jimmydahlqvist
Solution
• AWS S3 default encryption SSE-KMS
• Alternative set a bucket policy
• AWS StepFunctions to the rescue
• No-Code / Low-Code solution

@jimmydahlqvist
StepFunctions
• Distributed Map State
• Loop over all objects
• S3 integration, copy object
• Choice To check encryption

@jimmydahlqvist
Service / SDK integrations
• 15+ service integrations
• 200+ SDK integrations

@jimmydahlqvist
Gotchas
• S3 SDK copy support objects up to 5GB in size

@jimmydahlqvist
B
B
@jimmydahlqvist
dahlqvistjimmy
https://serverless-handbook.com
https://jimmydqv.com
THANK YOU

Similar to Encrypting data in S3 with Stepfunctions

Building a serverless event driven Slack BotJimmy Dahlqvist

Encryption and key management in AWS (SEC304) | AWS re:Invent 2013Amazon Web Services

Cloud Developer Days - BigQueryWlodek Bielski

Weathering the Data Storm – How SnapLogic and AWS Deliver Analytics in the Cl...SnapLogic

Triangle Kubernetes Meet-Up - Serverless is FaaS-tasticMark Hinkle

Modern data warehouse with AzureNilesh Gule

IoT enable smoker for great BBQJimmy Dahlqvist

Secrets management with EC2 Systems Manager Parameter StoreAlex Mattson

Doing Big Data Using Amazon's Analogs - StampedeCon Big Data Conference 2017StampedeCon

AWS chez AttestisOlivier Destrebecq

Architecting Digital Media Archive Migrations with AWS - STG301 - Anaheim AWS...Amazon Web Services

AWS re:Invent 2016: Extending Hadoop and Spark to the AWS Cloud (GPST304)Amazon Web Services

Kengo Horiuchi, SaaS Business Born in the Cloud :: AWS Partner Techshift Amazon Web Services Korea

Serverless CultureAWS User Group Bengaluru

Serverless without Code (Lambda)CloudHesive

[HUN] 2023_Hacker_Suli_Meetup_Cloud_DFIR_Alapok.pptxhackersuli

Deep dive on security in Amazon S3 - STG304 - Chicago AWS SummitAmazon Web Services

Rethinking Application Design for the CloudCloudBees

Encryption and Key Management in AWS Amazon Web Services

Encryption and Key Management in AWSAmazon Web Services

Similar to Encrypting data in S3 with Stepfunctions (20)

Building a serverless event driven Slack Bot

Encryption and key management in AWS (SEC304) | AWS re:Invent 2013

Cloud Developer Days - BigQuery

Weathering the Data Storm – How SnapLogic and AWS Deliver Analytics in the Cl...

Triangle Kubernetes Meet-Up - Serverless is FaaS-tastic

Modern data warehouse with Azure

IoT enable smoker for great BBQ

Secrets management with EC2 Systems Manager Parameter Store

Doing Big Data Using Amazon's Analogs - StampedeCon Big Data Conference 2017

AWS chez Attestis

Architecting Digital Media Archive Migrations with AWS - STG301 - Anaheim AWS...

AWS re:Invent 2016: Extending Hadoop and Spark to the AWS Cloud (GPST304)

Kengo Horiuchi, SaaS Business Born in the Cloud :: AWS Partner Techshift

Serverless Culture

Serverless without Code (Lambda)

[HUN] 2023_Hacker_Suli_Meetup_Cloud_DFIR_Alapok.pptx

Deep dive on security in Amazon S3 - STG304 - Chicago AWS Summit

Rethinking Application Design for the Cloud

Encryption and Key Management in AWS

Recently uploaded

Multi-cluster Kubernetes Networking- Patterns, Projects and GuidelinesSanjeev Rampal

Pvtaan Social media marketing proposal.pdfPvtaan

The Use of AI in Indonesia Election 2024: A Case StudyDamar Juniarto

Bug Bounty Blueprint : A Beginner's GuideVarun Mithran

Article writing on excessive use of internet.pptxabhinandnam9997

How Do I Begin the Linksys Velop Setup Process?Linksys Velop Login

Case study on merger of Vodafone and Idea (VI).pptxAnkitscribd

ER(Entity Relationship) Diagram for online shopping - TAEHimani415946

audience research (emma) 1.pptxkkkkkkkkkkkkkkkkklolsDocherty

Cyber Security Services Unveiled: Strategies to Secure Your Digital PresencePC Doctors NET

Statistical Analysis of DNS Latencies.pdfOndejSur

Production 2024 sunderland culture final - Copy.pptxChloeMeadows1

一比一原版UTS毕业证悉尼科技大学毕业证成绩单如何办理aagad

Premier Mobile App Development Agency in USA.pdfappinfoedgeca

Recently uploaded (14)

Multi-cluster Kubernetes Networking- Patterns, Projects and Guidelines

Pvtaan Social media marketing proposal.pdf

The Use of AI in Indonesia Election 2024: A Case Study

Bug Bounty Blueprint : A Beginner's Guide

Article writing on excessive use of internet.pptx

How Do I Begin the Linksys Velop Setup Process?

Case study on merger of Vodafone and Idea (VI).pptx

ER(Entity Relationship) Diagram for online shopping - TAE

audience research (emma) 1.pptxkkkkkkkkkkkkkkkkk

Cyber Security Services Unveiled: Strategies to Secure Your Digital Presence

Statistical Analysis of DNS Latencies.pdf

Production 2024 sunderland culture final - Copy.pptx

一比一原版UTS毕业证悉尼科技大学毕业证成绩单如何办理

Premier Mobile App Development Agency in USA.pdf

Encrypting data in S3 with Stepfunctions

1. JIMMY DAHLQVIST | 2024-03-14 Encrypting data in S3 with StepFunctions

2. @jimmydahlqvist Todays agenda • The problem • StepFunctions • Gotchas • Build It!

3. @jimmydahlqvist JIMMY DAHLQVIST Serverless enthusiast AWS Ambassador & AWS Community Builder & User Group Leader Founder of serverless-handbook.com Head of AWS @ Sigma Technology Cloud §

4. @jimmydahlqvist Problem • Server-side encryption with Amazon S3 managed keys (SSE-S3) • Thousands of objects • New compliance requirement • SSE-KMS (Customer managed keys) • Encrypt existing and new objects

5. @jimmydahlqvist Solution • AWS S3 default encryption SSE-KMS • Alternative set a bucket policy • AWS StepFunctions to the rescue • No-Code / Low-Code solution

7. @jimmydahlqvist StepFunctions • Distributed Map State • Loop over all objects • S3 integration, copy object • Choice To check encryption

8. @jimmydahlqvist Service / SDK integrations • 15+ service integrations • 200+ SDK integrations

9. @jimmydahlqvist StepFunction

10. @jimmydahlqvist StepFunction

11. @jimmydahlqvist StepFunction

12. @jimmydahlqvist StepFunction

13. @jimmydahlqvist StepFunction

14. @jimmydahlqvist StepFunction

15. @jimmydahlqvist Gotchas • S3 SDK copy support objects up to 5GB in size

16. Build It

17. @jimmydahlqvist B B @jimmydahlqvist dahlqvistjimmy https://serverless-handbook.com https://jimmydqv.com THANK YOU