Support custom KMS keys in S3CopyObjectOperator#60597
Merged
shahar1 merged 7 commits intoapache:mainfrom Feb 10, 2026
Merged
Conversation
boring-cyborg
bot
added
area:providers
provider:amazon
vincbeck
reviewed
Jan 15, 2026
…d added validation that both key id and encryption type are provided together
dominikhei
force-pushed
the
s3-copy-kms-support
branch
from
6c531b8 to
cfce007
Compare
vincbeck
approved these changes
Feb 4, 2026
o-nikolas
reviewed
Feb 6, 2026
shahar1
reviewed
Feb 10, 2026
Contributor
|
@dominikhei If there aren't critical changes to make, please let the CI run E2E without merging from main - so I could include it in the release I cut in the next hour or so. Thank you! |
shahar1
changed the title
shahar1
changed the title
81 tasks
Alok-kumar-priyadarshi
pushed a commit
to Alok-kumar-priyadarshi/airflow
that referenced
this pull request
Feb 11, 2026
Ratasa143
pushed a commit
to Ratasa143/airflow
that referenced
this pull request
Feb 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
closes: #55708
This PR introduces 2 new parameters to the S3CopyObjectOperator. With these one can specify a non-default KMS key when copying objects between buckets.
kms_key_id: The ARN, ID or alias of a KMS keykms_encryption_type: Whether it is standard KMS or double-shielded KMSThe parameters are passed to the Hooks
copy_object()method using kwargs, which passes them to the boto3 method.I did this to not introduce new parameters to the method and keep changes minimal, however I also see a point that this is not as clean as passing them to the method via parameters and if deemed preferential will change that.
Was generative AI tooling used to co-author this PR?