End of support notice: On October 7th, 2026, AWS will discontinue support for AWS IoT Greengrass Version 1. After October 7th, 2026, you will no longer be able to access the AWS IoT Greengrass V1 resources. For more information, please visit Migrate from AWS IoT Greengrass Version 1.
Encryption at rest
AWS IoT Greengrass stores your data:
-
Data at rest in the AWS Cloud. This data is encrypted.
-
Data at rest on the Greengrass core. This data is not encrypted (except local copies of your secrets).
Data at rest in the AWS Cloud
AWS IoT Greengrass encrypts customer data stored in the AWS Cloud. This data is protected using AWS KMS keys that are managed by AWS IoT Greengrass.
Data at rest on the Greengrass core
AWS IoT Greengrass relies on Unix file permissions and full-disk encryption (if enabled) to protect data at rest on the core. It is your responsibility to secure the file system and device.
However, AWS IoT Greengrass does encrypt local copies of your secrets retrieved from AWS Secrets Manager. For more information, see Secrets encryption.
