AWS Database Encryption SDK

Note

On June 9, 2023, the Amazon DynamoDB Encryption Client was renamed to AWS Database Encryption SDK. The AWS Database Encryption SDK continues to support legacy DynamoDB Encryption Client versions.

The AWS Database Encryption SDK is a set of software libraries that enable you to include client-side encryption in your database design. The AWS Database Encryption SDK provides record-level encryption solutions. You specify which fields are encrypted and which fields are included in the signatures that ensure the authenticity of your data. Encrypting your sensitive data in transit and at rest helps ensure that your plaintext data isn’t available to any third party, including AWS.

The AWS Database Encryption SDK for DynamoDB is designed especially for DynamoDB applications. It encrypts the attribute values in each table item using a unique encryption key. It then signs the item to protect it against unauthorized changes, such as adding or deleting attributes or swapping encrypted values. After you create and configure the required components, the AWS Database Encryption SDK transparently encrypts and signs your table items when you add them to a table. It also verifies and decrypts them when you retrieve them.

The AWS Database Encryption SDK is developed in open source. For more information about the AWS Database Encryption SDK, see the AWS Database Encryption SDK Developer Guide.