Lab:24 Data encrypt at rest

In Oracle Oracle Cloud Infrastructure (OCI), data encryption protects data in two situations:

1. Encryption at Rest

Data is encrypted when it is stored in:

• Databases
• Block volumes
• Object storage
• File systems

Even if someone steals the storage disk, they cannot read the data without the encryption key.

Example

Normal data → readable Encrypted data → unreadable coded format

OCI automatically decrypts it only for authorized users/services.

OCI Services Using Encryption at Rest

Block Volume Object Storage Autonomous Database File Storage Boot Volumes

Encryption at Rest Examples in OCI

---

2. Encryption in Transit

Data is encrypted while moving between:

User ↔ OCI Application ↔ Database Server ↔ Server

This prevents hackers from reading intercepted network traffic.

Example

When you open a secure website:

HTTPS/TLS encrypts the communication Nobody in the middle can read your password/data

Important Points Protects moving/network data Uses TLS/SSL protocols Prevents man-in-the-middle attacks Important for APIs and internet communication

---

Encryption in Transit Examples in OCI

---

Real-Life Analogy

At Rest = Locking documents inside a locker

In Transit = Sending documents in a sealed armored vehicle

Overall Comparison of Encryption at Rest vs In Transit