Thank you @mat . ... View more

It seems after i have added necessary permission, i am able to access the context parameter via invoke HTTP   ... View more

Thank you @SAMSAL . This is the issue, if i specify the external "Module Directory"  in the executescript , the ClassLoader somewhat clashed and no required class get loaded. So i have removed that and placed all my Jars into nifi/lib directory alone. Now it is working fine. Please let me know if any better way to handle that. Just not to use the nifi/lib directory. Also, let me try creating the custom processors to achieve this CSFLE.  ... View more

My Groovy script: import javax.crypto.Cipher import javax.crypto.spec.SecretKeySpec import java.util.Base64 // Define the AES encryption key String encryptionKey = "6ef552ae5333c9abb682e1f5221b1bdc" // Ensure the key is 16 bytes (128 bits) for AES-128 if (encryptionKey.length() != 32) { throw new IllegalArgumentException("Encryption key must be 16 characters long for AES-128.") } // Convert the key to a SecretKeySpec SecretKeySpec aesKey = new SecretKeySpec(encryptionKey.getBytes("UTF-8"), "AES") // Initialize the Cipher for AES/ECB/PKCS5Padding Cipher cipher = Cipher.getInstance("AES/ECB/PKCS5Padding") cipher.init(Cipher.ENCRYPT_MODE, aesKey) // Retrieve the input data to encrypt String inputData = record.getValue("name") // Replace "name" with your actual field name byte[] encryptedData = cipher.doFinal(inputData.getBytes("UTF-8")) // Encode the encrypted data to Base64 String encryptedBase64 = Base64.getEncoder().encodeToString(encryptedData) // Set the encrypted value back into the record record.setValue("name", encryptedBase64) // Return the updated record return record ... View more