Getting Started with Database-Level Encryption at Rest in ScyllaDB Cloud

ScyllaDB Cloud enhances the security of customer data through database-level encryption at rest, employing Customer-Managed Keys (CMK) to give clients control over their encryption keys or the option to delegate management to ScyllaDB. This encryption method, available on AWS and GCP platforms, complements the default storage-level encryption by encrypting data before storage, protecting against unauthorized access. The process involves using data encryption keys (DEKs) that are wrapped with master keys (MKs) stored in key management services, preventing data decryption without the MK. ScyllaDB Cloud supports multi-region deployment, ensuring data security across regions, and offers cost-effective management of encryption keys while complying with industry regulations. Customers can opt for ScyllaDB-managed keys, simplifying the process and reducing administrative overhead, thereby allowing them to focus on their core operations while maintaining robust data protection.

No tracked trend matches for this post yet.