CODEWITHSUNDEEP
mongodbgoogle-cloud-kms
Salitha
Salitha

Reputation: 1147

Encrypt Mongodb with Google Cloud Key Management Service

Is it possible to use Google KMS with Mongodb server on Ubuntu 18.04 (GCP) to encrypt data at rest? What are the requirements? How is it done? I want to use mongodb encryption feature for additional security.

The documentation mentions KMIP protocol and does Google provide such service?

ps: I have installed Mongodb enterprise edition on my server along with other services such as backend.

Upvotes: 0

Views: 487

Answers (2)

yyyyahir
yyyyahir

Reputation: 2322

From your comment and assuming your questions is on regards of how to use the KMS integration with MongoDB:

For a start, it is possible to use KMS with MongoDB. Google even provides an out-of-the-box solution of MongoDB Atlas to integrate with KMS via Market Place.

However, this integration is not available on Atlas M0, M2 and M5.

You can follow the same link for details on how to use the integration. If you have any specific question on this integration, please edit your question to include it.

Upvotes: 1

sethvargo
sethvargo

Reputation: 26997

Data on GCP is always encrypted at rest. You can optionally use your own KMS keys to encrypt the disks.

gcloud compute disks create encrypted-disk \
  --kms-key projects/[KMS_PROJECT_ID]/locations/[REGION]/keyRings/[KEY_RING]/cryptoKeys/[KEY]

Upvotes: 0

Related Questions