How to enable server side encryption on DynamoDB via CLI?

Question

I want to enable encryption on my production tables in DynamoDB. According to their docs at https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/encryption.tutorial.html#encryption.tutorial-cli I just use the --sse-specification flag; however, it's not working via CLI

I copied their exact command from the docs, below

aws dynamodb create-table \
  --table-name Music \
  --attribute-definitions \
      AttributeName=Artist,AttributeType=S \
      AttributeName=SongTitle,AttributeType=S \
  --key-schema \
      AttributeName=Artist,KeyType=HASH \
      AttributeName=SongTitle,KeyType=RANGE \
  --provisioned-throughput \
      ReadCapacityUnits=10,WriteCapacityUnits=5 \
  --sse-specification Enabled=true

Using their exact example or any other contrived setup I keep getting the same error message when ran from CLI

Unknown options: --sse-specification, Enabled=true

Is it possible to turn this on from CLI? The only other way I see is to create each table manually from the console and tick the encryption button during creation there

My AWS version is

aws-cli/1.14.1 Python/2.7.10 Darwin/17.5.0 botocore/1.8.32

@KevinSeaman Pasted in original question as well, aws-cli/1.14.1 Python/2.7.10 Darwin/17.5.0 botocore/1.8.32 — Joshua Ohana
– Joshua Ohana, Commented Apr 20, 2018 at 16:39

Kevin Seaman · Accepted Answer · 2018-04-20 20:14:15Z

2

You just need to update your version of the CLI. Version 1.14.1 was released on 11/29/2017, SSE on DynamoDB wasn't released until 2/8/2018.

answered Apr 20, 2018 at 20:14

Kevin Seaman

6523 silver badges9 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to enable server side encryption on DynamoDB via CLI?

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related