aws/aws-database-encryption-sdk-dynamodb

Transactional write calls on encrypted + unencrypted table

Closed this issue · 1 comments

Hi Team,

I have a use case where I need to make transactional put calls for an encrypted table and in an unencrypted table. Looking at the following reference, I believe i can only use one AmazonDynamoDB or DynamoDbEnhancedClient. Wondering if i should be using the DynamoDbEnhancedClient i have created with an encryption interceptor or not? Would the SDK / transactional call be able to figure out that one table needs an encrypted write and other one does not?

Thanks in advance!

The client you have created with an encryption interceptor should be just fine.

The interceptor configuration configures each table separately. Any unconfigured tables are assumed to be unencrypted, and the interceptor will pass the requests and responses through unchanged