Lowering AWS KMS decrypt API costs in EMR Spark jobs
Big Data Blog
This article presents practical techniques to reduce AWS KMS decrypt API costs when processing encrypted data with Amazon EMR and Apache Spark.
- Data aggregation consolidates small S3 files into larger blocks to reduce redundant decrypt calls
- Columnar formats like Parquet and ORC enable reading only required columns, improving I/O efficiency
- Apache Iceberg provides automatic file layout optimization and partition handling for data lakes
- Compression reduces data size and accelerates reads between S3 and Spark
- AWS Glue Data Catalog partition indexes enable server-side filtering to reduce S3 object scans
- These techniques can be used independently or together when S3 Bucket Keys cannot meet auditability requirements
Organizations can significantly lower operational costs by implementing these optimization strategies while maintaining encryption and compliance standards.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Feb 28
2024
2024
Optimize AWS KMS decryption costs for Database Activity Streams
Jan 27
2026
2026
Secure Apache Spark writes to Amazon S3 on Amazon EMR with dynamic AWS KMS encryption
Nov 27
2025
2025
Apache Spark encryption performance improvement with Amazon EMR 7.9
Jul 22
2024
2024
AWS KMS increases default service quotas for cryptographic operations
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.