AWS S3: How to connect to AWS S3 bucket using KMS key id

[Keld Mollnitz]

Hi all,

We have installed the Automic AWS S3 agent and want to upload files there.

In the Connection object we can select Secret Access Key but in my company we also have to provide KMS key which defines the encryption for the data we want to upload.

However, I cannot figure out how or where to provide the KMS key id to the connection...Can anyone help me with that ?

/Keld.

[Laura Ivan]

Hi Keld,

For the Automic AWS S3 Agent only the following authentications are supported:

• AWS Credentials File Path
• Secret Access Key
• EC2 Profile Instance
• External Provider (SAML)

AWS KMS keys are a different type of authentications, that we currently do not support. This is why you cannot use the Secret Access Key to authenticate with that option.

For more information regarding the AWS S3 Agent, please have a look over the agent documentation.

Best regards,
Laura

[Keld Mollnitz]

Hi @Laura Ivan,

Thanks for quick response. 

Unfortunately, as usage of KMS keys is a company requirement we cannot use the Automic AWS S3 agent and we need to look for alternative solutions...

/Keld.

[Keld Mollnitz]

Hi @Laura Ivan,

I have created an enhancement request here https://community.broadcom.com/idea/aws-s3-agent-enable-kms-key-encryption

/Keld.