...

As a data lake framework, it is very important for paimon in supporting data encryption to meet enterprise security standards. This document describes how to extend the current paimon architecture to provide users with out-of-the-box encryption capabilities.

Goals

Not related to engine

It is not related to the engine, when enable encryption, users can read and write paimon by any engines (Flink, Spark, Java API)

Pluggable KMS

The key management service (KMS) is pluggable in the system,

...