CODEWITHSUNDEEP
azureencryptionazure-cosmosdb
Joker_37
Joker_37

Reputation: 869

CosmosDB encryption at rest

We have documentDB database with encrypted data. All encryption and decryption are handled on client side. This database was created when there was no support of rest encryption in documentDB. I saw that new rest encryption support in documentDB is HIPAA compliant. It is mentioned in document that it is by default on and there is no user control on that. How can I use this feature in my existing database? Will it help me to get rid of my client side encryption?

Upvotes: 2

Views: 1965

Answers (1)

David Makogon
David Makogon

Reputation: 71066

Cosmos DB's encryption-at-rest is not accessible from your application; it's done transparently to you. If you use client-side encryption, you don't need to change it; data will still be encrypted from Cosmos DB's standpoint during writes, and decrypted when read.

Only you can decide whether you need to encrypt client-side, based on your corp policies, customer agreeements, etc. Also keep in mind: all traffic is SSL-based; there's no option for in-the-clear data transport.

Upvotes: 4

Related Questions