Handle encryption / decryption (crypto in general) of properties at runtime (supporting on-premise like JKS/HadoopKMS & cloud like crypto service/AWS KMS)

Handle encryption / decryption (crypto in general) of properties at runtime (supporting on-premise like JKS/HadoopKMS & cloud like crypto service/AWS KMS)

Crypto Service from PlatformServices description: https://in.talend.com/15993165

Products:
Data Streams, Data Prep, Data Catalog (maybe Talend 7)

What should be encrypted:
Only credentials at first

Important note:
Encrypt and decrypt operations could be done in different places in the architecture
encrypt in within applicative services, decrypt will be in runtime (in the job)

Key management:
Will be used what is provided by Platform Services

1. local based on JKS
2. based on AWS KMS service

Steps:

1. Provide method to collect and set sensitive data from Properties instance
2. Extend crypto client with method to encrypt/decrypt properties
3. Use extended crypto client in TCOMP