Articles → AWS → Encryption Of Environment Variables In Lambda Functions

Encryption Of Environment Variables In Lambda Functions

In this article, we will discuss encryption of environment variables in lambda functions.

Encryption Data In Rest Vs Encryption Data In Transit

When the data is stored in the encrypted format then we call it encryption data in rest. When the data is encrypted before sending it to another service over the internet, then we call it encryption data in transit.

Steps

In this article, we will work on the following steps: -

Create a lambda function
Encryption configuration

So, let’s get started.

Create A Lambda Function

First, create the lambda function. To create the lambda function, follow this link.

Encryption Configuration

The next step is to go to the environment variable section. You can follow this link. In this environment variable section, expand the Encryption configuration section.

Click to Enlarge

In the Encryption configuration section, there is an option to encrypt data at rest. You can use either of these keys for encryption: -

Amazon Managed key
Customer Managed key

Picture showing setting up the key for encryption at rest

Click to Enlarge

The next option is to encrypt data in transit. For that, check the checkbox Enable helpers for encryption in transit. A button Encrypt will appear beside the environmental variable.

Picture showing the Encrypt button when Enable helpers for encryption in transit checkbox is checked

Click to Enlarge

When you click on the Encrypt button, a popup window will appear to select the key.

Click to Enlarge

Select the key and click on the Encrypt button to complete the encryption.

Posted By -	Karan Gupta

Posted On -	Thursday, January 20, 2022

Query/Feedback

Your Email Id		**

Subject		*

Query/Feedback	Characters remaining 250	**