The service may be configured to encrypt data at rest using a key that the user creates and controls in a key management service, instead of a key managed by the provider.
Customer-Managed Encryption Keys
CCC.Core.CP35
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Core.TH18 | Encryption Key is Misused | Encryption keys may be used by an unauthorized entity due to inadequate key management practices or the compromise of a connected system. This could lead to the decryption of sensitive data, impacting its confidentiality and integrity. |