Configure AWS EMR Cluster to use FIPS endpoint for AWS KMS Calls

0

Hello,

Is it possible to configure EMR service to use the AWS KMS FIPS endpoint (https://ksm-fips.us-gov-east-1.amazonaws.com ) instead of the non-FIPS endpoint (https://ksm.us-gov-east-1.amazonaw.com ) when making calls to KMS to retrieve encryption keys? As per EMR documentation [1], we can use FIPS endpoint via AWS CLI or SDK using --endpoint-url) but not sure if it can be set as a default at the cluster level. [1] https://docs.aws.amazon.com/emr/latest/ManagementGuide/data-protection.html

Thanks.

AWS
支援工程師
已提問 2 年前檢視次數 257 次
1 個回答
0

In Amazon EMR, KMS is used in different features.

  • Encrypting data on the EMR file system (EMRFS)
  • Encrypting data on the storage volumes of cluster nodes(EBS)
  • Encryption context As of today, none of these features support specifying your own FIPS KMS endpoint.
profile pictureAWS
已回答 1 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南