Thank you Till. Gordon can you please help.
Regards, Vinay Patil On Fri, Jun 2, 2017 at 9:10 PM, Till Rohrmann [via Apache Flink User Mailing List archive.] <ml+s2336050n13459...@n4.nabble.com> wrote: > Hi Vinay, > > I've pulled my colleague Gordon into the conversation who can probably > tell you more about Flink's security features. > > Cheers, > Till > > On Fri, Jun 2, 2017 at 2:22 PM, vinay patil <[hidden email] > <http:///user/SendEmail.jtp?type=node&node=13459&i=0>> wrote: > >> Hi, >> >> Currently I am looking into configuring in-transit data encryption either >> using Flink SSL Setup or directly using EMR. >> >> Few Doubts: >> 1. Will the existing functionality provided by Amazon to configure >> in-transit data encrytion work for Flink as well. This is explained here: >> http://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-encry >> ption-enable-security-configuration.html >> http://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-data- >> encryption-options.html#emr-encryption-intransit >> >> 2. Using Flink SSL Setup: as we know only the IP address of master node >> on EMR , should we pass only its ip address in the SAN list as given here >> ? >> (I think it should work as the yarn-cli command will distribute the >> truststore and keystore to each TM ) >> https://ci.apache.org/projects/flink/flink-docs-release-1.3/ >> setup/security-ssl.html#use-yarn-cli-to-deploy-the- >> keystores-and-truststore >> >> Regards, >> Vinay Patil >> >> >> >> -- >> View this message in context: http://apache-flink-user-maili >> ng-list-archive.2336050.n4.nabble.com/In-transit-Data-Enc >> ryption-in-EMR-tp13455.html >> Sent from the Apache Flink User Mailing List archive. mailing list >> archive at Nabble.com. >> > > > > ------------------------------ > If you reply to this email, your message will be added to the discussion > below: > http://apache-flink-user-mailing-list-archive.2336050. > n4.nabble.com/In-transit-Data-Encryption-in-EMR-tp13455p13459.html > To start a new topic under Apache Flink User Mailing List archive., email > ml+s2336050n1...@n4.nabble.com > To unsubscribe from Apache Flink User Mailing List archive., click here > <http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=1&code=dmluYXkxOC5wYXRpbEBnbWFpbC5jb218MXwxODExMDE2NjAx> > . > NAML > <http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml> > -- View this message in context: http://apache-flink-user-mailing-list-archive.2336050.n4.nabble.com/In-transit-Data-Encryption-in-EMR-tp13455p13486.html Sent from the Apache Flink User Mailing List archive. mailing list archive at Nabble.com.
