hard20 pts · first answer countscloud-securityencryption

Why envelope encryption

Why do services like S3 and EBS use envelope encryption with a cloud KMS instead of sending all data to KMS to encrypt?

A.KMS keys cannot encrypt data at all; they only sign dataB.Envelope encryption removes the need for any key permissionsC.Data is encrypted locally with a data key, and only the small data key is encrypted by the KMS key, which avoids KMS size limits and latency while keeping the master key inside KMSD.It allows the master key to be exported and stored next to the data

Discussion 0

Join free to post in the discussion.

Why envelope encryption

Discussion 0

Related questions