AWS Advanced JDBC Wrapper now provides client-side encryption

This article announces that the AWS Advanced JDBC Wrapper now provides column-level client-side encryption through its KMS Encryption plugin for Java applications.

• Encrypts sensitive data at JDBC driver level before reaching database
• Decrypts data on read, keeping plaintext visible only to application
• Works with Amazon RDS and Aurora PostgreSQL and MySQL-compatible databases
• Requires no application code changes; integrates with SQL, Spring, Hibernate
• Database verifies data integrity through HMAC without needing encryption key
• Protects against compromised credentials, overprivileged admins, SQL injection
• Available as open-source project under Apache 2.0 license

The KMS Encryption plugin enhances database security by ensuring sensitive data remains encrypted within the database while maintaining compatibility with existing application frameworks.