Configure AWS EMR Cluster to use FIPS endpoint for AWS KMS Calls

0

Hello,

Is it possible to configure EMR service to use the AWS KMS FIPS endpoint (https://ksm-fips.us-gov-east-1.amazonaws.com ) instead of the non-FIPS endpoint (https://ksm.us-gov-east-1.amazonaw.com ) when making calls to KMS to retrieve encryption keys? As per EMR documentation [1], we can use FIPS endpoint via AWS CLI or SDK using --endpoint-url) but not sure if it can be set as a default at the cluster level. [1] https://docs.aws.amazon.com/emr/latest/ManagementGuide/data-protection.html

Thanks.

AWS
支持工程师
已提问 2 年前257 查看次数
1 回答
0

In Amazon EMR, KMS is used in different features.

  • Encrypting data on the EMR file system (EMRFS)
  • Encrypting data on the storage volumes of cluster nodes(EBS)
  • Encryption context As of today, none of these features support specifying your own FIPS KMS endpoint.
profile pictureAWS
已回答 1 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则