Re: Secure data

2018-08-07 Thread rajpal reddy
Hi Jon, Was trying the LUKS encryption following the Doc. https://aws.amazon.com/blogs/security/how-to-protect-data-at-rest-with-amazon-ec2-instance-store-encryption/ on ec2

Re: Secure data

2018-08-01 Thread Rahul Reddy
Thanks Jonathan/been/Jeff, Will look into encrypting in application On Wed, Aug 1, 2018, 7:52 PM Jonathan Haddad wrote: > Ben has a good point here. There's an advantage to encrypting in the > application, you can encrypt data per-account / user / [some other thing]. > It's possible to revoke

Re: Secure data

2018-08-01 Thread Jonathan Haddad
Ben has a good point here. There's an advantage to encrypting in the application, you can encrypt data per-account / user / [some other thing]. It's possible to revoke all access to all the data for a particular [whatever] by simply deleting the encryption key. Lots of options available. On

Re: Secure data

2018-08-01 Thread Ben Slater
My recommendation is generally to look at encrypting in your application as it’s likely to be overall more secure than DB-level encryption anyway (generally the closer to the user you encrypt the better). I wrote a blog on this last year:

Re: Secure data

2018-08-01 Thread Jonathan Haddad
You can also get full disk encryption with LUKS, which I've used before. On Wed, Aug 1, 2018 at 12:36 PM Jeff Jirsa wrote: > EBS encryption worked well on gp2 volumes (never tried it on any others) > > -- > Jeff Jirsa > > > On Aug 1, 2018, at 7:57 AM, Rahul Reddy wrote: > > Hello, > > Any one

Re: Secure data

2018-08-01 Thread Jeff Jirsa
EBS encryption worked well on gp2 volumes (never tried it on any others) -- Jeff Jirsa > On Aug 1, 2018, at 7:57 AM, Rahul Reddy wrote: > > Hello, > > Any one tried aws ec2 volume encryption for Cassandra instances? > >> On Tue, Jul 31, 2018, 12:25 PM Rahul Reddy wrote: >> Hello, >> >>

Re: Secure data

2018-08-01 Thread Rahul Reddy
Hello, Any one tried aws ec2 volume encryption for Cassandra instances? On Tue, Jul 31, 2018, 12:25 PM Rahul Reddy wrote: > Hello, > > I'm trying to find a good document on to enable encryption for Apache > Cassandra (not on dse) tables and commilogs and store the keystore in kms > or vault.