Lab:24 Data encrypt at rest - TanveeKhanDB/OCI GitHub Wiki
In Oracle Oracle Cloud Infrastructure (OCI), data encryption protects data in two situations:
1. Encryption at Rest
Data is encrypted when it is stored in:
- Databases
- Block volumes
- Object storage
- File systems
Even if someone steals the storage disk, they cannot read the data without the encryption key.
Example
Normal data → readable Encrypted data → unreadable coded format
OCI automatically decrypts it only for authorized users/services.
OCI Services Using Encryption at Rest
Block Volume Object Storage Autonomous Database File Storage Boot Volumes
Encryption at Rest Examples in OCI
2. Encryption in Transit
Data is encrypted while moving between:
User ↔ OCI Application ↔ Database Server ↔ Server
This prevents hackers from reading intercepted network traffic.
Example
When you open a secure website:
HTTPS/TLS encrypts the communication Nobody in the middle can read your password/data
Important Points Protects moving/network data Uses TLS/SSL protocols Prevents man-in-the-middle attacks Important for APIs and internet communication
Encryption in Transit Examples in OCI
Real-Life Analogy
At Rest = Locking documents inside a locker
In Transit = Sending documents in a sealed armored vehicle