I am trying to understand whether the primary key is encrypted when I choose to encrypt in rest for AWS DynamoDB
If the primary key is encrypted, how does a primary-key look up get performed under the hood?
If the primary key is not encrypted, then I know how DynamoDB is implemented under the hood, but it seems that it's not entirely safe for some use cases. Any comment then?
Furthermore, if I choose to have a Global Secondary Index for my DynamoDB table, are the primary key of the Global Secondary Index table encrypted?
- If not encrypted, I kinda understand how it works under the hood, but certainly some of my data get revealed in plain text;
- If encrypted, I'd appreciate to understand how it works.