enable server side encryption for dynamodb using cloudformation yaml

Question

can someone help me on how to enable a server side encryption to DynamoDB using yaml

Marcin · Accepted Answer · 2020-06-04 10:18:55Z

2

DynamoDB is encrypted at rest by default. Thus there is nothing to enable, nor you can't disable it:

All user data stored in Amazon DynamoDB is fully encrypted at rest.

However, if you don't want to use AWS owned customer master key (CMK) for encryption, you can use your own CMK from KMS.

To specity your own key there is SSESpecification option in CloudFormation:

SSESpecification:
  KMSMasterKeyId: <your-kms-key-id>
  SSEEnabled: true
  SSEType: KMS

answered Jun 4, 2020 at 10:18

Marcin

241k16 gold badges315 silver badges368 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

thanks @Marcin... and also is there a role going to access them have permissions to encrypt and decrypt