On this page

Show all

Help Center/ Data Encryption Workshop/ Service Overview/ Related Services

Related Services

Updated on 2025-03-04 GMT+08:00

View PDF

OBS

Object Storage Service (OBS) is a scalable service that provides secure, reliable, and cost-effective cloud storage for massive amounts of data. KMS provides central management and control capabilities of CMKs for OBS. It is used for server-side encryption with KMS-managed keys (SSE-KMS) on OBS.

EVS

Elastic Volume Service (EVS) offers scalable block storage for cloud servers. With high reliability, high performance, and rich specifications, EVS disks can be used for distributed file systems, development and test environments, data warehouse applications, and high-performance computing (HPC) scenarios to meet diverse service requirements. KMS provides central management and control capabilities of CMKs for EVS. It is used for encryption in EVS.

IMS

Image Management Service (IMS) allows you to manage the entire lifecycle of your images. KMS provides central management and control capabilities of CMKs for Image Management Service (IMS). It is used for private image encryption in IMS.

SFS

Scalable File Service (SFS) provides high-performance file storage (NAS) that can be expanded on demand. KMS provides central management and control capabilities of CMKs for SFS. It is used for file system encryption in SFS.

Relational Database Service (RDS) is a cloud database that is reliable, scalable, easy to manage, and immediately ready for use. KMS provides central management and control capabilities of CMKs for RDS. It is used for disk encryption in cloud databases.

ECS

An ECS is a basic computing component that consists of CPUs, memory, OS, and elastic volume service (EVS). After creating an ECS, you can use it like your local computer or physical server.

KPS manages key pairs of ECSs. The key pairs are used to authenticate users logging in to the ECSs.

Dedicated HSM can encrypt sensitive data in the service systems on your ECS. You can control the generation, storage, and access authorization of keys to ensure the integrity and confidentiality of data during transmission and storage.

DDS

Document Database Service (DDS) is a MongoDB-compatible database service that is secure, highly available, reliable, scalable, and easy to use. It provides DB instance creation, scaling, redundancy, backup, restoration, monitoring, and alarm reporting functions with just a few clicks on the DDS console. KMS provides central management and control capabilities of CMKs for DDS. It is used for disk encryption in DDS.

CTS

Cloud Trace Service (CTS) provides you with a history of DEW operations. After the CTS service is enabled, you can view all generated traces to review and audit performed KMS operations. For details, see the Cloud Trace Service User Guide.

**Table 1** KMS operations recorded by CTS
Operation	Resource Type	Trace Name
Create a key	CMK	createKey
Create a DEK	CMK	createDataKey
Create a plaintext-free DEK	CMK	createDataKeyWithoutPlaintext
Enable a key	CMK	enableKey
Disable a key	CMK	disableKey
Encrypt a DEK	CMK	encryptDatakey
Decrypt a DEK	CMK	decryptDatakey
Schedule key deletion	CMK	scheduleKeyDeletion
Cancel scheduled key deletion	CMK	cancelKeyDeletion
Generate random numbers	RNG	genRandom
Modify a key alias	CMK	updateKeyAlias
Modify key description	CMK	updateKeyDescription
Prompt risks about CMK deletion	CMK	deleteKeyRiskTips
Import key materials	CMK	importKeyMaterial
Delete key materials	CMK	deleteImportedKeyMaterial
Create a grant	CMK	createGrant
Retire a grant	CMK	retireGrant
Revoke a grant	CMK	revokeGrant
Encrypt data	CMK	encryptData
Decrypt data	CMK	decryptData
Add a tag	CMK	dealUnifiedTags
Delete a tag	CMK	dealUnifiedTags
Add tags in batches	CMK	dealUnifiedTags
Delete tags in batches	CMK	dealUnifiedTags
Enable key rotation	CMK	enableKeyRotation
Modify key rotation interval	CMK	updateKeyRotationInterval

**Table 2** KMS operations recorded by CSMS
Operation	Resource Type	Trace Name
Create a secret	Secret	createSecret
Update a secret	Secret	updateSecret
Delete a secret	Secret	forceDeleteSecret
Schedule the deletion of a secret	Secret	scheduleDelSecret
Cancel the scheduled secret deletion	Secret	restoreSecretFromDeletedStatus
Create a secret status	Secret	createSecretStage
Update a secret status	Secret	updateSecretStage
Delete a secret status	Secret	deleteSecretStage
Create a secret version	Secret	createSecretVersion
Download a secret backup	Secret	backupSecret
Restore a secret backup	Secret	restoreSecretFromBackupBlob
Update the secret version	Secret	putSecretVersion
Start the secret rotation	Secret	rotateSecret
Create a secret event	Secret	createSecretEvent
Update a secret event	Secret	updateSecretEvent
Delete a secret event	Secret	deleteSecretEvent
Create a resource tag	Secret	createResourceTag
Delete a resource tag	Secret	deleteResourceTag

**Table 3** KMS operations recorded by KPS
Operation	Resource Type	Trace Name
Create or import an SSH key pair	Key pair	createOrImportKeypair
Delete an SSH key pair	Key pair	deleteKeypair
Import a private key	Key pair	importPrivateKey
Export a private key	Key pair	exportPrivateKey
Bind an SSH key pair	Key pair	bindKeypair
Unbind an SSH key pair	Key pair	unbindKeypair
Clear private keys	Key pair	clearPrivateKey

**Table 4** KMS operations recorded by Dedicated HSM
Operation	Resource Type	Trace Name
Purchase an HSM instance	HSM	purchaseHsm
Configure an HSM instance	HSM	createHsm
Delete an HSM instance	HSM	deleteHsm

IAM

Identity and Access Management (IAM) provides the permission management function for DEW.

Only users who have KMS Administrator permissions can use DEW.

Only users who have the KMS Administrator and Server Administrator permissions can use the key pair function.

To apply for permissions, contact a user with Security Administrator permissions. For details, see the Identity and Access Management User Guide.

Previous topic: How to Access

Next topic: Personal Data Protection Mechanism

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot