mc table encrypt set

The mc table encrypt set command sets the server-side encryption configuration for an Iceberg warehouse or table.

Specify three arguments to set encryption on a warehouse, or five arguments to set encryption on a specific table. Table-level encryption overrides the warehouse default for that table.

mc table encrypt set SSE-S3 myaistor mywarehouse

mc [GLOBALFLAGS] table encrypt set        \
                 SSE-TYPE                 \
                 [--sse-kms-key-id KEY]   \
                 ALIAS                    \
                 WAREHOUSE                \
                 [NAMESPACE TABLE]

Parameters

SSE-TYPE

Required

The server-side encryption type to apply. Specify one of:

• SSE-S3 - Server-side encryption with AIStor-managed keys.
• SSE-KMS - Server-side encryption with keys managed by an external key management service. Requires --sse-kms-key-id.

--sse-kms-key-id

Optional

The key management service (KMS) key ID to use for SSE-KMS encryption.

This flag is required when SSE-TYPE is SSE-KMS.

ALIAS

Required

The alias of a MinIO AIStor cluster.

WAREHOUSE

Required

The name of the warehouse.

NAMESPACE

Optional

The namespace of the table to set encryption on. Specify NAMESPACE and TABLE together to set table-level encryption. Omit both to set the warehouse default.

TABLE

Optional

The name of the table to set encryption on. Specify NAMESPACE and TABLE together to set table-level encryption.

Global flags

This command supports any of the global flags.

Examples

Set SSE-S3 encryption on a warehouse

mc table encrypt set SSE-S3 myaistor mywarehouse

Set SSE-KMS encryption on a warehouse

mc table encrypt set SSE-KMS --sse-kms-key-id my-key myaistor mywarehouse

Set SSE-S3 encryption on a table

mc table encrypt set SSE-S3 myaistor mywarehouse mynamespace mytable

Set SSE-KMS encryption on a table

mc table encrypt set SSE-KMS --sse-kms-key-id my-key myaistor mywarehouse mynamespace mytable