aws-dynamodb-encryption-java

Automatically encrypts and signs all non-primary key attributes when using DynamoDBMapper with annotations like @DoNotEncrypt, enabling transparent protection with minimal code changes.

Supports various EncryptionMaterialsProvider implementations, including symmetric keys, asymmetric keys, and Java keystore integration, allowing customization based on security requirements.

Signs encrypted data to detect unauthorized modifications, ensuring that retrieved items haven't been tampered with, as highlighted in the integrity feature.

Encrypts and signs all attributes except primary keys unless explicitly excluded, providing a strong security baseline without extra configuration.