检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Encrypting Data in OBS Scenario You can use KMS to encrypt all or certain objects in an OBS bucket. When you use KMS encryption in OBS, KMS envelope encryption ensures data encryption and decryption without transmitting a large amount of data over the network.
Encrypting Data in EVS KMS encrypts created cloud disks to ensure data security. The encryption attribute of a disk cannot be changed after the disk is created. For details about how to create an encrypted disk, see Purchasing an EVS Disk.
Encrypting Data in IMS You can use KMS encryption to create private images in Image Management Service (IMS) to securely store data.
Encrypting and Decrypting Data Through Cross-region DR Scenario If a fault occurs during encryption or decryption in a region, you can use KMS to implement cross-region DR encryption and decryption, ensuring service continuity.
Function + DEW: Encrypting/Decrypting Files Introduction Preparation Building a Program Adding an Event Source Processing Files
For details about how to encrypt an image, see Encrypting Data in IMS. For details about how to encrypt a data disk, see Encrypting Data in EVS. Parent topic: Using KMS to Encrypt and Decrypt Data for Cloud Services
Example 2: Encrypting or Decrypting Large Volumes of Data Scenario Encrypt or decrypt a large amount of data. Encryption process: Create a CMK in KMS. Call the create-datakey API of the KMS to create a DEK. A plaintext DEK and a ciphertext DEK will be generated.
Encrypting EVS Disks Encrypting cloud disks ensures data privacy and control, making it ideal for scenarios that demand high security or compliance standards. This section describes how to use the keys managed by Data Encryption Workshop (DEW) to encrypt EVS disks.
Encrypting an RDS DB Instance Overview Relational Database Service (RDS) supports MySQL and PostgreSQL engines. After encryption is enabled, disk data will be encrypted and stored on the server when you create a DB instance or expand disk capacity.
Example 1: Encrypting or Decrypting Small Volumes of Data Scenario Encrypt or decrypt data not larger than 4 KB, such as passwords, certificates, and phone numbers, by using a tool on the console or calling an API.
Encrypting a DDS DB Instance Overview After encryption is enabled, disk data will be encrypted and stored on the server when you create a DB instance or expand disk capacity.
Encrypting a DEK Encrypt a DEK with the specified master key. Decrypting a DEK Decrypt a DEK with the specified master key. Encrypting a Local File Create a CMK on the management console. For details, see Creating a CMK. Prepare basic authentication information.
Figure 3 Encrypting and decrypting an HTTPS certificate The procedure is as follows: Create a CMK on KMS. Call the KMS API for encrypting a data key and use the specified CMK to encrypt the plaintext certificate. Deploy the certificate onto a server.
(Optional) Encrypting a Model HiLens Kit cameras support model encryption. After a model is encrypted, you can call the model using only the HiLens Framework API.
(Optional) Encrypting a Model HiLens Kit cameras support model encryption. After a model is encrypted, you can call the model using only the HiLens Framework API.
Encrypting Data Function Description: This API is used to encrypt data by using a specified CMK. Constraints If you use an asymmetric key to encrypt data, record the selected key ID and encryption algorithm.
Encrypting a DEK Function Description: This API is used to encrypt a DEK by using a specified CMK.
Encrypting and Decrypting Data Columns Data encryption is widely used in various information systems as a technology to effectively prevent unauthorized access and prevent data leakage.
The key used for encrypting the image is the same as that used for encrypting the system disk. For details, see Creating a System Disk Image from an ECS. Parent topic: Managing Private Images
operations in this tutorial, your account will have the following resources: Two OBS buckets (for storing uploaded and processed files respectively) A file encryption/decryption function An OBS trigger for associating the function with the OBS buckets Parent topic: Function + DEW: Encrypting
