Designing and implementing data encryption for data at rest and in transit
The usual questions from anyone who wants to store data on a public cloud would be as follows:
- How safe is my data?
- Can the employees of the cloud company access my data?
- Can any outsiders access my data?
Such concerns are usually addressed by cloud companies like Azure using encryption at rest and in transit. This also happens to be the first requirement of our example requirements for IAC. Let's look at encryption at rest in detail.
Encryption at rest
Encryption at rest is the process of encrypting data before writing it to disks and decrypting the data when requested by applications. Encryption at rest protects data from physical disk theft, retrieval of data from lost disks, unauthorized data access by malicious cloud company employees, and so on. Unless someone has the decryption key or possesses insanely powerful supercomputing resources (the kind that governments might...
