Security

SmartStore: How to encrypt data in-flight with SSL when uploading and downloading to AWS S3?

bpdahlb2018
Loves-to-Learn

I am trying to better understand the encryption of data in-flight when sending data up to AWS S3 and pulling it back down.

The docs page "https://docs.splunk.com/Documentation/Splunk/7.3.4/Indexer/SmartStoresecuritystrategies" (link might not show as I do not enough Karma to post links; I'm talking about the SmartStoresecuritystrategies section of the Indexer documentation) discusses the different SSL settings that can/should be set for SmartStore.

We are looking to use KMS encryption at-rest and the example for it feels lacking for me to understand it. How do we ensure that the data is encrypted in-flight to AWS S3? I am assuming that the KMS encryption is not magically handling the in-flight encryption. Do we need to pull down a cert from AWS to use as the sslRootCAPath or do we need to still generate our own (Public vs. Internal)? Is the only way to do this switching over to sse-c?

Any help or clarification would be greatly appreciated!

Labels (2)
0 Karma

JosephHobbs
Path Finder

All communication to/from S3 is going to be done over SSL, so the encryption is going to be handled for you.  As far as encryption at rest, AWS KMS is going to handle that encryption/decryption on the AWS S3 side to ensure the file is encrypted at rest.

0 Karma

patilsonali1729
Path Finder

Were you able to find the solution? Have same question.

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...