Does Amplify DataStore support Encryption at client?

[sridhanya-ambaadi]

Securing data stored in mobile devices is of huge importance for apps related to healthcare, finance sector. Encryption is a widely used technique to secure data at rest. When considering the encryption of database in mobile, either the whole file can be encrypted or only certain attributes can be encrypted. In native frameworks like CoreData this is achieved either through DataProtection API or through transformable properties. Does Datastore have an equivalent option to encrypt data at rest?

[diegocstn]

hi @sridhanya-ambaadi,
DataStore doesn't currently support encryption of data at rest but it's indeed an interesting feature.

I'll keep this issue open so we track it in our backlog.

[rpostulart]

I am also interested in this option and looking for the timelines

[sridhanya-ambaadi]

@diegocstn

Could you please share some updates on this feature request and also the timeline by which we can expect this to be available.

[rpostulart]

@undefobj do you have an update?

[undefobj]

@undefobj do you have an update?

No update on this. It is something we're looking into, but local encryption that is still query-able with key management to devices for syncing to the cloud is a complex problem space that will take time to address.

[trnglt]

This is very disappointing. So, is the only solution for developers with secure data to encrypt the data before storing it in datastore and to manage keys in app?

[thisisabhash]

Thank you for posting this. We are trying to improve Datastore with new features and will provide an update here.