Enabling SSE-S3

QDS supports the Amazon S3-Managed Encryption Keys (SSE-S3). This type of SSE uses AES-256 to encrypt the data.

Create a ticket with Qubole Support in case you want to enable the SSE-S3 on the QDS account.

To enable SSE-S3 on a given cluster for the s3a filesystem, pass fs.s3a.server-side-encryption-algorithm=AES256 as the cluster override in the cluster’s Advanced Configuration > HADOOP CLUSTER SETTINGS > Override Hadoop Configuration Variables.