Ensure IBM Cloud® File Storage for Virtual Private Cloud is encrypted with provider managed keys

CaoCấp 1Xem xét thủ côngibmcloud

Mô tả

By default, IBM Cloud® File Storage for Virtual Private Cloud provides provider- managed encryption for all data. For enhanced security, customers can bring their own encryption keys and manage them through IBM Key Management Services – Key Protect or Hyper Protect Crypto Services (HPCS). With provider-managed keys, the file service manages encryption at rest by default with no additional configuration needed by the customer. With provider managed encryption, the service manages the root encryption keys on behalf of the customer.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

You can use the IBM® Cloud File Storage for Virtual Private Cloud configuration properties to verify whether a file share is enabled with provider managed encryption. From the IBM Cloud Console, Navigate to your file share resource: 1. In the IBM Cloud console, go to Menu icon, VPC Infrastructure, Storage, File Storage Shares. A list of all file shares is displays. 2. For each of the shares listed, ensure the encryption field specifies Provider Managed.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

You will not be able to change the encryption option once data is already written to a File Share. In order to change your encryption setting you will need to create a new File Share, set it to use your desired encryption setting and then upload/copy the existing data to this new share.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: cloudcryptoencryptionibmcloud
Tham chiếu: CIS IBM Cloud Foundations Benchmark v2.0.0 - 2.2.2.1 Ensure IBM Cloud® File Storage for Virtual Private Cloud is encrypted with provider managed keys