johnclara opened a new issue #1805:
URL: https://github.com/apache/iceberg/issues/1805


   TLDR: Do you all want to split out an aws-java-sdk-1 variant or is there no 
plans to support sdk1?
   
   The aws java sdk2 doesn't support client side encryption: 
   https://github.com/aws/aws-encryption-sdk-java/issues/58
   https://github.com/aws/aws-sdk-java-v2/issues/34
   
   Current tables with client side encryption wouldn't be able to flip over to 
this.
   
   One idea would be to try to mimic the decryption inside iceberg's 
application level encryption with the aws encryption sdk,
   but it doesn't support the s3 encrypted objects: 
https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/introduction.html
   
   I'm wondering if you all would want to split out an sdk1 variant to support 
client side encryption or if you think it would be better to try to reimplement 
it in the EncryptedFileStream higher up?
   
   If you all did want to split it out, would setting the multipart upload 
threads to 1 be enough to ensure serial uploads (required by the client to 
compute the MAC in the last part)?


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
[email protected]



---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to