Lab: 27 Encrypt Boot volume with Custom managed keys (CMK) - TanveeKhanDB/OCI GitHub Wiki
Encrypt Boot volume with Custom managed keys
It means the operating system disk (boot volume) of a virtual machine or server is encrypted using encryption keys that we can control, instead of keys fully managed by the cloud provider.
Usage:
- Better security control
- Meet compliance requirements
- Ability to revoke access by disabling keys
- Audit key usage
Steps to perfrom Encryption of Boot volume with Custom managed keys in OCI.
Getting error: As two service also needs permission to communicate with each other hence below mentioned policy need to assing.
allow service blockstorage to use keys in compartment Hub_storage_and_compute_compartment
Its changed to oracle manage key to Custome manage key