Protect Your Data With Self-Managed Keys (BYOK) Enhancements

Confluent has announced general availability of Bring-Your-Own-Key (BYOK) encryption for Enterprise clusters on AWS and External Key Manager (EKM) support for Dedicated clusters on Google Cloud, expanding customer control over data-at-rest encryption. BYOK allows organizations to use and revoke self-managed keys, addressing security, data sovereignty, and compliance needs such as GDPR, while Enterprise clusters retain autoscaling, elastic billing, and private networking capabilities. Enterprise clusters use Confluent-managed keys for temporary storage and envelope encryption for data moved to infinite storage, with customer-managed keys protecting the underlying data encryption keys. Google Cloud EKM support enables Dedicated-cluster customers to use keys managed through compatible third-party services such as Thales or Fortanix, which is intended to support regulated sectors including finance and healthcare. Both capabilities can be enabled during new-cluster provisioning through the Confluent UI, CLI, API, or Terraform.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.