amazonka-s3-encryption: Amazon Simple Storage Service SDK - Client-Side Encryption.

[ aws, library, mpl ] [ Propose Tags ]

Addons for amazonka-s3 to support client-side encryption. This allows the use of a client-side master key to encrypt/decrypt data locally and store encrypted data in S3 to be later decrypt by any other client with access to the same master key. Unencrypted object data or keys are not sent to Amazon S3 using this method, but object metadata is transmitted in plaintext.

Encryption and decryption are done in a streaming fashion, with encrypted requests being incrementally signed using the version 4 signature algorithm and sent via chunked-encoding.

The client-side master key you provide can be a symmetric key, an asymmetric public/private key pair, or a KMS master key.

This library is designed to be compatible with the official Java AWS SDK (both V1 and V2 envelopes), but only a limited set of the possible encryption options are supported. Therefore assuming defaults, objects stored with this library should be retrievable by any of the other official SDKs, and vice versa. The metadata can be attached as header metadata on the stored object or as a separate JSON instructions file. PutObject, GetObject, and the various multipart upload operations are supported.

See Amazonka.S3.Encryption to get started.

[Skip to Readme]


Note: This package has metadata revisions in the cabal description newer than included in the tarball. To unpack the package including the revisions, use 'cabal get'.

Maintainer's Corner

Package maintainers

For package maintainers and hackage trustees


  • No Candidates
Versions [RSS] 2.0
Dependencies aeson (>= && <1.6 || >=2.0 && <2.3), amazonka (>=2.0 && <2.1), amazonka-core (>=2.0 && <2.1), amazonka-kms (>=2.0 && <2.1), amazonka-s3 (>=2.0 && <2.1), base (>=4.12 && <4.19), bytestring (>=0.10.8), case-insensitive (>=1.2), conduit (>=1.3), crypton (>=0.32 && <0.35 || >=1.0.0 && <1.1), http-client (>=0.5 && <0.8), lens (>=4.14), memory (>=0.6), mtl (>=, text (>=1.1), unordered-containers (>=0.2.5) [details]
License MPL-2.0
Copyright Copyright (c) 2016 Brendan Hay
Author Brendan Hay
Maintainer Brendan Hay <>, Jack Kelly <>
Revised Revision 3 made by jack at 2024-05-13T07:53:30Z
Category AWS
Home page
Bug tracker
Source repo head: git clone git://
Uploaded by BrendanHay at 2023-07-27T21:45:52Z
Distributions NixOS:2.0
Downloads 55 total (7 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Docs available [build log]
Last success reported on 2023-07-28 [all 1 reports]

Readme for amazonka-s3-encryption-2.0

[back to package description]

Amazon Simple Storage Service SDK - Encryption Addons





For any problems, comments, or feedback please create an issue here on GitHub.


amazonka-s3-encryption is released under the Mozilla Public License Version 2.0.