Encryption with Amazon Redshift

You can use encryption when you perform bulk loading or bulk unloading between Amazon Redshift and SAS. Here is how to do this.

  1. Assign a user-friendly name to an encryption key by using PROC S3.
    Note: Only IAM:KMS keys are supported for SAS/ACCESS Interface to Amazon Redshift.
  2. Enable bulk loading with the BULKLOAD= data set option, or enable bulk unloading with the BULKUNLOAD= LIBNAME option or BULKUNLOAD= data set option.
  3. Specify the BL_ENCKEY= LIBNAME option or BL_ENCKEY= data set option to indicate that data files should be encrypted. The value for BL_ENCKEY= is the user-friendly name that you assigned to an encryption key by using PROC S3.
  4. Specify any additional bulk-load options. For more information, see Bulk Loading and Bulk Unloading with Amazon Redshift.
Last updated: February 3, 2026