Encryption
Encryption is the basis of all data security policies, as it ensures critical data cannot fall into the hands of potential attackers. In recent years, encryption has also taken increased importance because of compliance and personal data protection regulations. AWS Glue offers several features to support encrypting your data both at rest and in transit. This section will cover all encryption options and features while providing examples and best practices.
Encryption at rest
When it comes to encryption at rest in Glue, it can happen at three different levels:
- Encrypting the metadata that defines your data lake, which is handled by Glue itself
- Encrypting the data auxiliary to executing Glue resources
- Encrypting the data within your data lake
In this section, we will go through each level. For encryption, Glue relies on AWS Key Management Service (KMS), an AWS service that provides serverless hosting and management of encryption keys. All encryption...