v.23.5New Feature

Added Server-Side Encryption with KMS Keys for S3 Tables and Disks

Added server-side encryption using KMS keys with S3 tables, and the header setting with S3 disks. Closes #48723. #48724 (Johann Gan).
Added support for server-side encryption using KMS keys with S3 tables and introduced the header setting for S3 disks in ClickHouse.

Why it matters

This feature enables users to securely store data in S3 by leveraging server-side encryption with AWS KMS keys, ensuring enhanced data protection and compliance. The header setting for S3 disks allows specifying custom request headers, facilitating advanced configuration and security options when accessing S3 storage.

How to use it

To enable server-side encryption with KMS keys for S3 tables, configure your S3 table settings to include the appropriate KMS encryption parameters as described in AWS documentation. For the header setting on S3 disks, specify the desired HTTP headers in the disk configuration block in the ClickHouse configuration files.