Skip to content

chore(docs): Record Encryption use-case ought to mention Azure Key Vault. #215

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
k-wall merged 1 commit into from
Jan 21, 2026
+565 −226
Merged

chore(docs): Record Encryption use-case ought to mention Azure Key Vault. #215

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions _use_cases/encryption-at-rest.markdown
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,7 +84,7 @@ The solution's foundations rest on industry-standard encryption techniques.

* Envelope Encryption is employed to efficiently encrypt/decrypt records. Envelope Encryption is specified by [NIST SP.-800-57 part 1 revision 5](https://csrc.nist.gov/Projects/Key-Management/Key-Management-Guidelines).
* Integrates with common Key Management Services for safe and secure storage of key encryption keys.
* Plugins for [HashiCorp Vault](https://www.hashicorp.com/)® [AWS Key Management Service](https://docs.aws.amazon.com/kms/latest/developerguide/overview.html)® and [Fortanix DSM](https://www.fortanix.com/platform/data-security-manager)®
* Plugins for [HashiCorp Vault](https://www.hashicorp.com/)®, [AWS Key Management Service](https://docs.aws.amazon.com/kms/latest/developerguide/overview.html)®, [Azure Key Vault](https://azure.microsoft.com/en-us/products/key-vault)®, and [Fortanix DSM](https://www.fortanix.com/platform/data-security-manager)®
* Additional KMS implementations are planned.
* API available to plug in alternatives
* Uses AES-GCM symmetric keys (in accordance with [NIST FIPS 197](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197-upd1.pdf)
Expand All @@ -104,6 +104,6 @@ are encrypted and some remain unencrypted are supported.
<br/>

[^1]: Replacement key material applied to newly produced records only.
[^2]: The Kafka logo is a trademark of The Apache Software Foundation. The Vault mark included in the diagram is a trademark of [HashiCorp](https://www.hashicorp.com/). The AWS logo is a trademark of [Amazon Web Services, Inc](https://aws.amazon.com/). The Fortanix logo is a trademark of [Fortanix Inc](https://www.fortanix.com/).
[^2]: The Kafka logo is a trademark of The Apache Software Foundation. The AWS logo is a trademark of [Amazon Web Services, Inc](https://aws.amazon.com/). The HashiCorp Vault logo is a trademark of [HashiCorp](https://www.hashicorp.com/). The Azure logo is a trademark of [Microsoft Corporation](https://www.microsoft.com/). The Fortanix logo is a trademark of [Fortanix Inc](https://www.fortanix.com/).


Loading