3.1.2 -- 2023-11-13

Fix

Fixed an issue where, when using the DynamoDbEncryptionInterceptor,
an encrypted item in the Attributes field of a DeleteItem, PutItem, or UpdateItem
response was passed through unmodified instead of being decrypted.

3.1.1 -- 2023-11-07

Fix

Issue when a DynamoDB Set attribute is marked as SIGN_ONLY in the AWS Database Encryption SDK (DB-ESDK) for DynamoDB.

DB-ESDK for DynamoDB supports SIGN_ONLY and ENCRYPT_AND_SIGN attribute actions. In version 3.1.0 and below, when a Set type is assigned a SIGN_ONLY attribute action, there is a chance that signature validation of the record containing a Set will fail on read, even if the Set attributes contain the same values. The probability of a failure depends on the order of the elements in the Set combined with how DynamoDB returns this data, which is undefined.

This update addresses the issue by ensuring that any Set values are canonicalized in the same order while written to DynamoDB as when read back from DynamoDB.

See: https://github.com/aws/aws-database-encryption-sdk-dynamodb-java/DecryptWithPermute/README.md for additional details

3.1.0 -- 2023-09-11

Features

• Support underscores in DynamoDB expression attribute names

Maintenance

• Upgrade various library dependencies
• A variety of fixes to the library's CI and testing

3.0.0 -- 2023-07-24

Features

• Updates to the AWS Cryptographic Material Providers Library for Java,
  a pivotal dependency of the this library,
  introduce Thread Safe Cryptographic Materials Caches (CMCs):
  • Storm Tracking Cache
    Safe for use in a multi threaded environment,
    tries to prevent redundant or overly parallel backend calls.
    See Spec changes for details.
  • Multi Threaded Cache
    Safe for use in a multi threaded environment,
    but no extra functionality
• Examples for using the Enhanced Client via Lombok Annotation and TableSchemaBuilder
• Detection of ignored DynamoDB Encryption Configuration Tags due to Nested Data Models
• Multi Threading Example

BREAKING CHANGES

• Updates to the AWS Cryptographic Material Providers Library for Java,
  a pivotal dependency of the library,
  introduce the following breaking changes:
  • CMCs:
    • Original Cryptographic Materials Cache has been renamed to Single Threaded Cache
    • CreateCryptographicMaterialsCacheInput now ONLY accepts CacheType,
      which determines which, if any, of the three implemented CMCs will be returned.
    • The DefaultCache is StormTrackingCache
  • CreateAwsKmsHierarchicalKeyringInput:
    • no longer has a maxCacheSize field
    • now has an optional cache field for a CacheType
  • Hierarchical Keyring's Key Store:
    • The Hierarchical Keyring's Key Store's Data Structure has changed.
      As such, entries persisted in the Key Store with prior versions of this library are NOT compatible.
      Instead, we recommend Creating a new DynamoDB Table for this version of the Key Store.
    • The Key Store's CreateKeyInput now takes:
      • An Optional String branchKeyIdentifier
      • An Optional EncryptionContext encryptionContext
        • This encryptionContext will be added to the Encryption Context sent to KMS prefixed with aws-crypto-ec:
    • Creating a Key now also calls KMS:ReEncrypt
    • CreateKeyStore no longer creates a GSI
    • The Encryption Context used with KMS' GenerateDataKeyWithoutPlaintext no longer includes the discarded GSI's status.
    • More details about the Key Store's changes are available in our Specification:
      • 2023-07-12 Update Key Store
      • KeyStore Specification

Fix

• With the Enhanced Client, Identify Only Index attributes for Sign Only,
  NOT all Key Attributes, such as Auto Generated Last Modified Time Stamp.

Maintenance

• A variety of fixes to the libraries CI and testing

3.0.0-preview-2 -- 2023-06-09

Fix

• Fixes generated pom.xml file such that it is compatible with mvn projects.

3.0.0-preview-1 -- 2023-06-09

Features

• Initial release of the AWS Database Encryption SDK.
  This release is considered a developer preview
  and is not intended for production use cases.