specifying s3 encryption keys to use

[ddvlamin]

Is it possible to specify at workflow runtime (for example through the options file) a particular kms key to use for encrypting the data when downloading from or uploading files to S3 (basically when Cromwell localizes the files and uploads them back to final_workflow_outputs_dir)?

If not what would need to change in the code (roughly) to enable this? I was looking at the code AWSBatchJob.scala, but was then wondering how I could get access to the workflow options in there?

[henriqueribeiro]

hi @ddvlamin. are you in Cromwell's slack? me and some other people have been working on AWS backend for Cromwell and we discuss this in Slack.