Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure KMS Key Policies for Kinesis Video Streams Encryption #37

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

kgopelom
Copy link

Issue #, if available:

Description of changes: This pull request addresses an issue encountered when using a customer-managed KMS key for encryption in Kinesis Video Streams (KVS). While the default KMS key works without any problems, using a customer-managed key leads to certain complications.

Changes made in this pull request:

  • Implemented KMS key policies specifically tailored for the encryption key used in Kinesis Video Streams.
  • Ensured that the necessary permissions are in place for the customer-managed KMS key.
  • Tested the implementation to verify that encryption and decryption operations function correctly with the configured key policies.

By applying these changes, we can now successfully utilize customer-managed KMS keys for encryption in Kinesis Video Streams, providing enhanced security and control over the encryption process.

Please review the modifications and provide any feedback or suggestions for improvement.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@kgopelom
Copy link
Author

Hello,

Not sure if the responsibility is delegated to user for them to add lambda permissions in their key policy when using customer managed keys. In that case, it would be beneficial to update the documentation to clearly communicate this expectation to users.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant