是否有在 DynamoDB for nodejs 中加密数据的解决方案

Question

I'm researching solutions for data encryption in dynamodb.
I found that there's a library DynamoDB Encryption Client, but it's only for Java/Python(our project is written in nodejs). Also, there's another package aws encryption SDK which works with AWS KMS.

The SDK can't encrypt on table level. That means I have to traverse through all fields in an item and encrypt each one before storing it in DB. It doesn't seem to be a great idea.

Answer 1

To achieve what you want, you have to save the encrypted data in DynamoDB and encrypt/decrypt at application layer. Encryption for data from your application layer onwards is also your responsibility. AWS provides many services which helps us implement the security. So the dataflow will be something like:

Application(encrypt) -> DynamoDB
DynamoDB -> (decrypt) Application

Examples of encryption using Node (JS) using AWS KMS service can be found here: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/js-examples.html