# Logstash cipher plugin w/ KMS

**URL:** <https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374>\
**Category:** Logstash\
**Created:** [April 27, 2022, 9:33am UTC](https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374 "2022-04-27T09:33:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![MrAtheist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mratheist/32/98751_2.png) [@MrAtheist](https://discuss.elastic.co/u/MrAtheist)\
**Post date:** [April 27, 2022, 9:33am UTC](https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374/1 "2022-04-27T09:33:19Z")

</div>

Hello,

Not sure if anyone has got the cipher filter plugin to work with kms? would love some assistance on it if there is any hack for this...

> <https://github.com/logstash-plugins/logstash-filter-cipher/issues/32>
>
> \<!--
> Please search existing issues. The issue may already exist.
> \--\>
> 
> \#### T…ell us about the issue
> 
> Lack of documentation around kms
> \<!--
> What's the problem? Is information missing? Inaccurate? Just not clear?
> Please include a link to the page (if applicable).
> 
> \--\>
> \*\*Description:\*\*  
> I have wired up rds logs --\> kinesis via \[database activity stream\](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/DBActivityStreams.Enabling.html), which is then streamed to elk via a "logstash pipeline". One tiny problem here is that the rds logs are all just a giant blob of mess getting spammed to elk.
> There seems to be this \[plugin\](https://github.com/onfido/logstash-filter-cipher\_kms) (looks to be deprecated...) that deals with kms. Are there any documentation within this repo around integration specifically with kms?  
> 
> \`\`\`
> cipher {
> algorithm =\> "aes-128-cbc"
> cipher\_padding =\> 1
> 
> iv\_random\_length =\> 16
> key =\> "WHATS\_IN\_HERE?" \<----
> key\_size =\> 16
> 
> mode =\> "decrypt"
> source =\> "message"
> target =\> "message"
> base64 =\> true
> }  
> \`\`\`
> 
> \*\*Anything else?\*\*

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 25, 2022, 9:33am UTC](https://discuss.elastic.co/t/logstash-cipher-plugin-w-kms/303374/2 "2022-05-25T09:33:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.