Encrypting data in S3 with Stepfunctions

Presentation on how to encrypt data in S3 in a serverless way using KMS and setpfunctins

1. JIMMY DAHLQVIST | 2024-03-14 Encrypting data in S3 with StepFunctions

2. Todays agenda The problem StepFunctions Gotchas Build It!

3. JIMMY DAHLQVIST Serverless enthusiast AWS Ambassador & AWS Community Builder & User Group Leader Founder of serverless- handbook.com Head of AWS @ Sigma Technology Cloud §

4. Problem Server-side encryption with Amazon S3 managed keys (SSE-S3) Thousands of objects New compliance requirement SSE-KMS (Customer managed keys) Encrypt existing and new objects

5. Solution AWS S3 default encryption SSE-KMS Alternative set a bucket policy AWS StepFunctions to the rescue No-Code / Low-Code solution

6. StepFunctions Distributed Map State Loop over all objects S3 integration, copy object Choice To check encryption

7. Service / SDK integrations 15+ service integrations 200+ SDK integrations

8. StepFunction

9. StepFunction

10. StepFunction

11. StepFunction

12. StepFunction

13. StepFunction

14. Gotchas S3 SDK copy support objects up to 5GB in size

15. Build It

16. @ jimmydahlqvist dahlqvistjimmy https://serverless- handbook.com https:// jimmydqv.com THANK YOU