3 ms·
My main problem is that I need to do operations on the data while it's in the DB. This means that I cannot leave it encrypted end-to-end there.
by alliewithane 2y ago
My main problem is that I need to do operations on the data while it's in the DB. This means that I cannot leave it encrypted end-to-end there.
- atmosx 2y agoWhen RDS is encrypted at rest, it means that the data stored in the database is encrypted while it resides on disk. Means that the data is protected against unauthorised access to raw storage. The data accessed by the app is not encrypted, you can still work on the data as you would usually do. It's mostly a compliance thing. Not sure what level of security it _actually_ brings to the data itself, but most companies are okay with "encryption at rest".
- UltraSane 2y agoEncryption at rest is meant to protect data when the storage device is stolen or lost.
- cr125rider 2y agoSure you can. You just can’t do zero knowledge encryption.
- alliewithane 2y agoHow is that possible?