Help Center/ Data Encryption Workshop/ Service Overview/ KMS/ Cloud Services with KMS Integrated/ Encrypting Data in EVS
Updated on 2024-05-06 GMT+08:00
View PDF
Share

Encrypting Data in EVS

  • When purchasing a disk, you can choose Advanced Settings > Encryption to encrypt the disk using the key provided by KMS. For details, see Figure 1. For more information about EVS, see the Elastic Volume Service User Guide.

    Before you use the encryption function, EVS must be granted the permission to access KMS. If you have the right to grant the permission, you can grant the permission directly. If you do not have the permission, contact a user with the security administrator permissions to add the security administrator permission for you. Then, you can grant the permission. For more information about EVS, see the Elastic Volume Service User Guide.

    Figure 1 Encrypting data in EVS

    There are two types of CMKs that can be used:

    • The default key evs/default created by KMS
    • Custom keys that you create on the KMS console using KMS-generated key materials
  • You can also call EVS APIs to create encrypted EVS disks. For details, see the Elastic Volume Service API Reference.