检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Managing Encrypted EVS Disks EVS Encryption Overview Creating an Encrypted EVS Disk
Image encryption Encrypted images cannot be replicated across regions. Encrypted images cannot be changed to non-encrypted images. Encrypted images cannot be exported. Billing If KMS encryption is used, what you use beyond the free quota given by KMS will be billed.
Parent Topic: Managing Encrypted EVS Disks
Encrypted: The custom key is disabled or scheduled for deletion. The disk can still be used, but there is no guarantee for how long it will be usable. If the disk is detached, it will be impossible to re-attach it later.
Bool": { "evs:Encrypted": [ "false" ] } } } ] } Example 4: Grant permissions to forcibly create backups for disks.
If you use an encrypted disk to create a backup, the backup generated will be an encrypted backup. You cannot modify the encryption attribute of the backup. If you use an encrypted disk to create an image, the image generated will be an encrypted image.
DEW Managing Encrypted EVS Disks After EVS is enabled, the performance metrics of monitored disks can be viewed through Cloud Eye without any additional plug-in installed. The monitored metrics include Disk Read Rate, Disk Write Rate, Disk Read Requests, and Disk Write Requests.
AK/SK authentication: Requests are encrypted using AK/SK pairs. AK/SK authentication is recommended because it is more secure than token authentication. Token Authentication The validity period of a token is 24 hours.
Snapshots of encrypted disks are stored encrypted, and those of non-encrypted disks are stored non-encrypted. Legacy snapshots You can manually create a maximum of seven legacy snapshots for a disk. Huawei Cloud reserves the right to restrict user snapshots created during OBT.
Encrypted EVS disks cannot be transferred. EVS disks with backups and snapshots available cannot be transferred. EVS disks associated with backup policies cannot be transferred. DSS disks cannot be transferred. EVS disks cannot be transferred across regions.
For details, see Managing Encrypted EVS Disks. The encryption attribute of a disk cannot be changed after the disk is purchased. Parent topic: Basic Concepts
Snapshots, backups, and images created from encrypted disks are encrypted by default. Managing Encrypted EVS Disks Parent topic: Security
Range N/A encrypted Boolean Definition The reserved field. Range N/A snapshot_policy_id String Definition The ID of the snapshot policy applied to the disk. Range N/A Table 4 Link Parameter Type Description href String Definition The corresponding shortcut link.
Time format: UTC YYYY-MM-DDTHH:MM:SS.XXXXXX dedicated_storage_id String The ID of the dedicated storage pool housing the disk. dedicated_storage_name String The name of the dedicated storage pool housing the disk. description String The disk description. encrypted Boolean This field
Time format: UTC YYYY-MM-DDTHH:MM:SS.XXXXXX dedicated_storage_id String The ID of the dedicated storage pool housing the disk. dedicated_storage_name String The name of the dedicated storage pool housing the disk. description String The disk description. encrypted Boolean Whether
Sharing No From shared to non-shared From non-shared to shared Device type No From SCSI to VBD From VBD to SCSI Encryption No From non-encrypted to encrypted From encrypted to non-encrypted However, you can: Create a backup for the disk.
Range N/A encrypted Boolean Definition Whether the snapshot is encrypted. Range N/A cmk_id String Definition The ID of the encryption key used by the snapshot's source disk. Range N/A category String Definition The snapshot type.
Range N/A encrypted Boolean Definition Whether the snapshot is encrypted. Range N/A cmk_id String Definition The ID of the encryption key used by the snapshot's source disk. Range N/A category String Definition The snapshot type.
Range N/A encrypted Boolean Definition The reserved field. Range N/A snapshot_policy_id String Definition The ID of the snapshot policy applied to the disk. Range N/A Table 5 Link Parameter Type Description href String Definition The corresponding shortcut link.
Range N/A encrypted Boolean Definition Whether the snapshot is encrypted. Range N/A cmk_id String Definition The ID of the encryption key used by the snapshot's source disk. Range N/A category String Definition The snapshot type.