Home icon

How to use AWS Database Encryption SDK for client-side encryption and perform searches on encrypted attributes in DynamoDB tables

Security Blog

This article explains how to use the AWS Database Encryption SDK (DB-ESDK) to encrypt sensitive data in DynamoDB tables before storing it, and perform searches on the encrypted attributes without decrypting the entire dataset.

Specifically, the article covers:

  • Client-side encryption and its benefits
  • Overview of the AWS Database Encryption SDK (DB-ESDK)
  • How DB-ESDK works with DynamoDB for encryption and decryption
  • Setting up DB-ESDK cryptography with AWS KMS
  • Configuring DynamoDB tables for encryption and defining beacons for searchable encryption
  • Building an application to insert encrypted data into DynamoDB and query the encrypted attributes using beacons
  • Code examples demonstrating the setup and usage
Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Jan 31
2024
A new and improved AWS CDK construct for Amazon DynamoDB tables
May 7
2026
AWS Advanced JDBC Wrapper now provides client-side encryption
Jan 10
2024
Effective data sorting with Amazon DynamoDB
Jan 24
2024
Back up and restore transparent data encrypted databases across accounts in Amazon RDS for SQL Server

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.