Preliminary considerations
When using Aruba Cloud services, protecting your data is essential. Encryption allows you to do this effectively by transforming readable information into a format that cannot be read by anyone who does not have the correct key.
Encryption helps ensure data confidentiality, integrity and, in some cases, authenticity. It is an essential measure for complying with regulations such as the GDPR and protecting sensitive information, whether personal or business-related.
Protecting data does not only mean restricting access to it, but also making it unusable in the event of theft or unauthorized access.
Data states
Data encryption is essential for the security of Aruba Cloud services and depends on the state of the data:
- in transit - data moving between systems, for example between a browser and a server or between backend components;
- in use - data active in memory or being processed by a virtual machine or application;
- at rest - data stored on disk, such as on volumes, backups or databases.
Protecting data on Aruba Cloud services
- Enable the KMS service to create encryption keys to use with supported Aruba Cloud services (Virtual Private Cloud);
-
- Promote a security-conscious culture: use credentials correctly, rotate keys regularly and comply with security policies.
- For Linux Cloud Servers, disable password-based access and use only secure, up-to-date SSH keys.
- Two-factor authentication (2FA) does not encrypt data, but it can be used together with encryption to strengthen overall security.