Configure AWS EMR Cluster to use FIPS endpoint for AWS KMS Calls

0

Hello,

Is it possible to configure EMR service to use the AWS KMS FIPS endpoint (https://ksm-fips.us-gov-east-1.amazonaws.com ) instead of the non-FIPS endpoint (https://ksm.us-gov-east-1.amazonaw.com ) when making calls to KMS to retrieve encryption keys? As per EMR documentation [1], we can use FIPS endpoint via AWS CLI or SDK using --endpoint-url) but not sure if it can be set as a default at the cluster level. [1] https://docs.aws.amazon.com/emr/latest/ManagementGuide/data-protection.html

Thanks.

AWS
INGENIERO DE SOPORTE
preguntada hace 2 años257 visualizaciones
1 Respuesta
0

In Amazon EMR, KMS is used in different features.

  • Encrypting data on the EMR file system (EMRFS)
  • Encrypting data on the storage volumes of cluster nodes(EBS)
  • Encryption context As of today, none of these features support specifying your own FIPS KMS endpoint.
profile pictureAWS
respondido hace un año

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas