Does EventBridge support CMK KMS keys for encryption at rest?

0

Looking at https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-data-protection.html and in console, I am leaning towards thinking that EventBridge does support only AWS Owned keys when encrypting data at rest, rather than customer-managed ones.

Is it so?

2 Respostas
3
Resposta aceita

The way it reads to me, they do not support cmk as per your conclusion.

It seems eventbridge behaves similarly to other AWS services that do not have the ability to use a cmk from KMS.

One other example of this would be S3 audit logs which have to be delivered to an S3 bucket only encrypted with a AWS managed key and not cmk.

I believe there’s no way either for EB to assume a service linked role within your account either.

If you find this to be inaccurate, please let me know. I’d sure be interested.

profile picture
ESPECIALISTA
respondido há um ano
profile picture
ESPECIALISTA
avaliado há 2 meses
2

Event bridge doesn't support KMS CMK for data encryption at rest.

I'd imagine, if there is any requirement of having KMS CMK for data encryption at rest and if event bridge scheduler can fit in your requirement, then you can consider event bridge scheduler, which support KMS CMK(symmetric key encryption). Look at Data Encryption in Eventbridge Scheduler.

Comment here, if you have any additional questions.

profile pictureAWS
ESPECIALISTA
respondido há um ano

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas