Skip to content

AWS Crypto Tools

#100 · Level 3 · Modern architecture · Security

AWS Crypto Tools is a collection of open source encryption libraries made by AWS. It includes the AWS Encryption SDK, the AWS Database Encryption SDK and the Amazon S3 Encryption Client. With these, the app itself can encrypt data before sending it; this is called client-side encryption. These libraries are built following common best practices, so developers don’t have to write the detailed encryption rules themselves. They usually work with KMS to store keys.

Instead of going to the trouble of making your own lock, buying and using a tested lock from a good company.

If you write encryption code yourself, the chance of mistakes is high. Using a tested library is safer.

Encrypting secret data in the app before sending it to the database (client-side encryption).

Azure SDK encryption libraries

For details and the latest information, see the official documentation: