Encryption-at-Rest API

  • reference
    +
    The encryption-at-rest API lets you encrypt audit, configuration, logging, and bucket data when written to disk. See Native Encryption at Rest for more information.

    APIs in this Section

    HTTP Method URI Documented at

    GET

    /settings/encryptionKeys/

    List Encryption-at-Rest Keys

    GET

    /settings/encryptionKeys/{KEY_ID}

    List Single Encryption-at-Rest Key

    POST

    /settings/encryptionKeys

    Create an Encryption-at-Rest Key

    POST

    /settings/encryptionKeys/{KEY_ID}/test

    Test an Encryption-at-Rest Key

    PUT

    /settings/encryptionKeys/{KEY_ID}

    Update an Encryption-at-Rest Key

    PUT

    /settings/encryptionKeys/{KEY_ID}/test

    Test changes to an Encryption-at-Rest Key

    DELETE

    /settings/encryptionKeys/{KEY_ID}

    Delete an Encryption-at-Rest Key

    GET

    /settings/security/encryptionAtRest

    Get Audit, Config, and Log Encryption-at-Rest Settings

    POST

    /settings/security/encryptionAtRest

    Change Audit, Config, and Log Data Encryption-at-Rest Settings

    POST

    /controller/dropEncryptionAtRestDeks/bucket/{BUCKET_NAME}

    Rotate DEKs for Bucket and Re-encrypt Data

    POST

    /controller/dropEncryptionAtRestDeks/{TYPE}

    Rotate DEKs and Re-encrypt Data for a Type of Encrypted Data

    POST

    /controller/rotateEncryptionKey/{KEY_ID}

    Rotate Encryption-at-Rest Key

    POST

    /controller/forceEncryptionAtRest/bucket/{BUCKET_NAME}

    Force Encryption of Unencrypted Bucket Data

    POST

    /controller/forceEncryptionAtRest/{TYPE}

    Force Encryption of Unencrypted Data of a Type