-
Notifications
You must be signed in to change notification settings - Fork 1.5k
Description
This JIRA is an extension to Parquet Modular Encryption Jira(PARQUET-1178) that will provide the basic building blocks and APIs for the encryption support.
This JIRA provides a crypto data interface for schema activation of Parquet encryption and serves as a high-level layer on top of PARQUET-1178 to make the adoption of Parquet-1178 easier, with pluggable key access module, without a need to use the low-level encryption APIs. Also, this feature will enable seamless integration with existing clients.
No change to specifications (Parquet-format), no new Parquet APIs, and no changes in existing Parquet APIs. All current applications, tests, etc, will work.
From developer perspective, they can just implement the interface into a plugin which can be attached any Parquet application like Hive/Spark etc. This decouples the complexity of dealing with KMS and schema from Parquet applications. In large organization, they may have hundreds or even thousands of Parquet applications and pipelines. The decoupling would make Parquet encryption easier to be adopted.
From end user(for example data owner) perspective, if they think a column is sensitive, they can just set that column’s schema as sensitive and then the Parquet application just encrypt that column automatically. This makes end user easy to manage the encryptions of their columns.
Reporter: Xinli Shang / @shangxinli
Assignee: Xinli Shang / @shangxinli
Related issues:
- High-level flexible and fine-grained column level access control through encryption with pluggable key access (Blocked)
- Passing Field Metadata to Parquet (Blocked)
- Sample of usage Parquet-1396 and Parquet-1178 for column level encryption with pluggable key access (Blocked)
- High level interface to Parquet encryption (is depended upon by)
Externally tracked issue: https://issues.apache.org/jira/browse/PARQUET-1178
PRs and other links:
- GitHub Pull Request #764
- https://docs.google.com/document/d/17GTQAezl1ZC1pMNHjYU_bPVxMU6DIPjtXOiLclXUlyA/edit#heading=h.r9wntu3s8swd
Note: This issue was originally created as PARQUET-1396. Please see the migration documentation for further details.