Data Security Zone Overview

When migrating corporate data to the cloud, enterprises typically encrypt local data and upload it to Huawei Cloud Object Storage Service (OBS) for persistent storage. Users can then process this data through various methods, such as using Elastic Cloud Server (ECS) for data analysis, Cloud Container Engine (CCE) for data processing and labeling, and ModelArts for model training. Each processing node uses a dedicated encryption and decryption SDK to decrypt data, process it, encrypt the results, and write them back. However, when data moves across multiple nodes, traditional monitoring methods cannot clearly display the entire data flow from local upload, cloud storage, and node processing to result write-back and client download. Additionally, traditional monitoring methods fail to track whether data encryption remains compliant in real time during each phase. Consequently, enterprises face severe difficulties during security audits and compliance source tracing, leaving them unable to prove full data-link security to regulators or internal management. To address this issue, Huawei Cloud DSC provides data security zones. You can organize resources such as OBS buckets, ECS instances, CCE clusters, and ModelArts instances into a unified enterprise data space. It logically isolates data and resources, visualizes data flows, monitors encryption status, audits operations, and and traces lineages. This helps enterprises enhance trust and control over cloud data security.