Support Questions
Find answers, ask questions, and share your expertise

HDP install in AWS VPC, on custom AMI -- feasibility question.

Solved Go to solution

Re: HDP install in AWS VPC, on custom AMI -- feasibility question.

S3A on HDP 2.5 supports server side encryption.

<property>
  <name>fs.s3a.server-side-encryption-algorithm</name>
  <value>AES256</value>
  <description>Specify a server-side encryption algorithm for s3a: file system.
    Unset by default, and the only other currently allowable value is AES256.
  </description>
</property>

Re: HDP install in AWS VPC, on custom AMI -- feasibility question.

One more thing: S3A doesn't handle R/W buckets with different ACLs attached to different parts of it, as the code expects to have write access to any R/W repo. You should restrict access by bucket, not by trying to use some kind of ACL within a bucket