Help Center> FunctionGraph> Best Practices> Function + DEW: Encrypting/Decrypting Files> Introduction
Updated on 2023-10-27 GMT+08:00
View PDF

Introduction

Huawei Cloud Data Encryption Worksop (DEW) uses the hardware security module (HSM) to protect your keys. All of your keys are protected by the root key in HSM. DEW provides access control and log tracing for all operations on keys, and records key uses to meet audit and compliance requirements. You can buy a dedicated HSM instance to encrypt your service systems (including sensitive data, financial payments, and electronic bills). It encrypts the sensitive data of your enterprise (contracts, transactions, and records) and of users (IDs and mobile numbers). This prevents data breaches and unauthorized access or data tampering by internal users caused by network attacks and data reduction. This chapter describes how to use FunctionGraph and DEW to encrypt and decrypt files.

Scenarios

  • Upload files to a specified OBS bucket.
  • Encrypt and decrypt each uploaded file.
  • Upload the processed files to another OBS bucket.
    1. This tutorial uses two different OBS buckets.
    2. The function you create must be in the same region (default region recommended) as the OBS buckets.

Procedure

  • Create two buckets on the OBS console.
  • Create a function with an OBS trigger.
  • Upload files to one of the buckets.
  • Trigger the function to encrypt and decrypt the files.
  • The function uploads the processed files to the other bucket.

    After you complete the operations in this tutorial, your account will have the following resources:

    1. Two OBS buckets (for storing uploaded and processed files respectively)
    2. A file encryption/decryption function
    3. An OBS trigger for associating the function with the OBS buckets