检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
The value is anonymized when being recorded in logs and encrypted when being saved to the database.
The value is anonymized when being recorded in logs and encrypted when being saved to the database.
However, information such as usernames and passwords is highly sensitive and needs to be encrypted to ensure user data privacy. Flink 1.15 allows for the use of DEW to manage credentials.
The username and password of the source database are encrypted and stored in DRS and will be cleared after the task is deleted.
Snapshots generated from encrypted disks and disks created using these snapshots automatically inherit the encryption function. This option is displayed only for clusters of v1.13.10 or later. Commercial use 2 Private images can be used to build worker node images.
Objects are encrypted using SSE-KMS on the server side. Value range: kms. For details, see Table 8. Default value: None sseAlgorithm SSEAlgorithmEnum No Explanation: Encryption algorithm. Restrictions: Only KMS is supported. Value range: See Table 9.
If an object is encrypted with SSE-KMS, the ACL configured for it is not in effect in the cross-tenant case. For more information, see ACLs. If you have any questions during development, post them on the Issues page of GitHub.
The value can be used to reference the encrypted content in a pod.
Restrictions: If an object is encrypted using server-side encryption, the ETag is not the MD5 value of the object.
Restrictions: If an object is encrypted using server-side encryption, the ETag is not the MD5 value of the object. Value range: The value must contain 32 characters.
After this function is disabled, the CM does not use encrypted communication and all information is transmitted in plaintext, which may bring security risks such as eavesdropping, tampering, and spoofing. ssl_cert_expire_alert_threshold Parameter description: Specifies the SSL certificate
The new password will be encrypted using the hash algorithm and stored for authentication in the next connection. You have obtained the public network address, including the IP address and port number in the data warehouse cluster.
As a result, the RTO and RPO of HA will be decreased. hadr_super_user_record_path Parameter description: Specifies the path for storing encrypted files of the hadr_disaster user in the standby database instance in streaming DR mode.
Minimum length: 0 characters Maximum length: 255 characters encoded_authorization_message String The encrypted authorization information. Minimum length: 0 characters Maximum length: 65,535 characters error_param Array of strings Invalid parameters.
Storing encrypted credentials in configuration files or environment variables and decrypting them when needed ensures security. For details, see Flink OpenSource SQL Jobs Using DEW to Manage Access Credentials.
Key specifications and restrictions: The ILM tables, hash bucket tables, and encrypted tables can be parsed and restored. Data can be restored and imported to the target database on the web UI.
Files or programs encrypted by KMS are not supported. HDFS: The path starts with a slash (/). Spark Script must end with .sql while MapReduce and Spark Jar must end with .jar. sql and jar are case-insensitive.
Password Yes Encrypted device secret. The value of this parameter is the device secret encrypted by using the HMAC-SHA256 algorithm with the timestamp as the key.
Using encrypted disks does not affect cluster operations, such as accessing the cluster and importing data to the cluster. Disk encryption deteriorates operation performance by about 10%.
Place the server certificate at the beginning and the other certificates in sequence if a certificate chain contains multiple certificates. 400 APIG.2105 Encrypted private keys are not supported. Encrypted private keys are not supported.
