Managing Encrypted Aurora DAS Over Kinesis With AWS SDK

Amazon Aurora's Database Activity Stream (DAS) provides a secure and near real-time stream of database activity, encrypting data in transit using AWS Key Management Service (KMS) with a customer-managed key (CMK). The encrypted data is streamed into a Serverless Streaming Data Service. However, reading and interpreting the encrypted data stream requires additional effort, particularly when building custom analytics, alerting, or logging solutions. This article explains how to read the encrypted Aurora DAS records from Kinesis using the AWS Encryption SDK.