Code Examples for Client-Side Field Level Encryption in Confluent Cloud

The following code examples and demos, for Java, Go, and C#/.NET, can be used to help you use client-side field level encryption in Confluent Cloud. These examples are available in the Client-Side Field Level Encryption (CSFLE) Examples GitHub repository.

Requirements

• A Confluent Cloud cluster with Advanced Stream Governance enabled. For details, see Dependency on Stream Governance.
• For supported clients, see Requirements.

Examples

Java

These following examples for producers and consumers use the supported Java client for Apache Kafka®. For details, see Apache Kafka Java Client.

• Client-Side Field Level Encryption (CSFLE) with AWS KMS
• Client-Side Field Level Encryption (CSFLE) with Azure Key Vault
• Client-Side Field Level Encryption (CSFLE) with Google Cloud KMS
• Client-Side Field Level Encryption (CSFLE) with HashiCorp Vault

Go

These examples use the supported Golang client for Apache Kafka®. For details, see Confluent’s Golang Client for Apache Kafka.

Avro

• Producer encryption example (using Avro)
• Consumer decryption example (using Avro)

JSON

• Producer encryption example (using JSON)
• Consumer decryption example (using JSON)

Protobuf

• Producer encryption example (using Protobuf)
• Consumer decryption example (using Protobuf)

C#/.NET

The following examples use Confluent’s .NET client for Apache Kafka®. For details, see Confluent’s .NET client for Apache Kafka.

Avro

• Generic encryption example (using Avro)
• Specific encryption example (using Avro)

JSON

• Encryption example (using JSON)

Protobuf

• Encryption example (using Protobuf)

Related content

• Configuration Settings for Client-Side Field Level Encryption
• Protect Sensitive Data Using Client-Side Field Level Encryption on Confluent Cloud
• Implement a Custom KMS Driver
• Quick Start – Use Client-Side Field Level Encryption to Protect Sensitive Data
• Kafka Client Quick Start for Confluent Cloud