Use the encryption specified by the S3 bucket instead of SSE-KMS #4897
Unanswered
christianplatta1012
asked this question in
Help
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
All files written by Sagemaker seem to have SSE-KMS encryption even if the bucket is configured with SSE-S3 encryption.
We don't specify any KMS keys, therefore this seems to be a default behaviour when the kms key parameter is none.
Is there a configuration option to change this somewhere?
This is an issue for us because our bucket has a replication config that should move the files generated by sagemaker to another account. SSE-KMS encrypted objects are not replicated by default and we would need to create our own KMS key and do the IAM stuff for everything that is working with the files. This is a big overhead especially in a cross-account replication scenario
Beta Was this translation helpful? Give feedback.
All reactions