加密在S3上传

Question

在给定的代码：

BasicAWSCredentials awsCred = new BasicAWSCredentials(accessKey, secretKey); 
AmazonS3Client s3Client = new AmazonS3Client(awsCred); 
TransferManager tm = new TransferManager(s3Client); 
Upload upload = tm.upload(bucket,key,new File(file)); 

如何，我们可以添加KMS SSEAlgorithm和加密密钥，同时上传到S3？

Answer 1

从您的代码示例中，我看到您正在使用多部分上传。使用AmazonS3#initiateMultipartUploadRequest(InitiateMultipartUploadRequest)开始多部分上传。创建InitiateMultipartUploadRequest对象时，可以设置各种加密选项，例如setSSEAwsKeyManagementParams和setSSECustomerKey。

Answer 2

下面是加密多载的方法进行加密
//方法

public static void addEncryption(InitiateMultipartUploadRequest multipartUploadRequest, String awsKmsEncryptionKey) 
{ 
    ObjectMetadata metadata = new ObjectMetadata(); 
    metadata.setSSEAlgorithm(SSEAlgorithm.KMS.getAlgorithm()); 
    multipartUploadRequest.withSSEAwsKeyManagementParams(new SSEAwsKeyManagementParams(awsKmsEncryptionKey)); 
    multipartUploadRequest.setObjectMetadata(metadata); 
}