Data Key Recycling for SQS

0

I need to use recycle keys for SQS. When I recycle the key, both producer and consumer will use same key as per documentation. The calls to SendMessage and ReceiveMessage will each trigger a call to AWS KMS Decrypt to verify the integrity of the data key before using it. This works only if the messages are ordered i.e. Fifo queues. If I am using standard queues, this will not work as the messages may be out of order. Can you clarify.

1回答
0

I think it will work. Look at this documentation:

https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html

SQS uses "Envelop Encryption": It describes the fact that every message is stored with it encrypted data key with it.

That way in- or out-of-order messages will not matter in case of rotation.

profile picture
JaccoPK
回答済み 2年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ